last executing test programs:

2m0.539189745s ago: executing program 3 (id=367):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x2, 0x101}]}, 0x10)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
recvfrom$inet(r0, 0x0, 0x0, 0x720, 0x0, 0x0)

1m59.676968525s ago: executing program 3 (id=380):
syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000080))
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r2=>0x0})
sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x2400c804)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

1m59.638849216s ago: executing program 3 (id=381):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000e000001000000000000000807010000080700ffe500fcff0000000095"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x4b}, 0x94)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3d74}, {0x0, 0xcd}, &(0x7f0000000800)=[{&(0x7f0000000700)=""/205, 0xcd}], 0x1, 0x28, 0x401}}, @mask_cswp={0x58, 0x114, 0x9, {{0x4, 0x9}, 0x0, 0x0, 0x70000000000000, 0xd9, 0x0, 0x40, 0x1, 0x5}}], 0xa0, 0x4040}, 0x0)

1m59.577509058s ago: executing program 3 (id=383):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020000000000000000000000000001140004000000000000"], 0xac}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x4c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}]}, @CTA_TUPLE_ORIG={0x4}, @CTA_NAT_SRC={0x4}]}, 0x4c}}, 0x0)

1m59.549103908s ago: executing program 3 (id=385):
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0)

1m58.985872192s ago: executing program 3 (id=393):
socket$inet6(0xa, 0x5, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2}, 0x38)

1m43.841567768s ago: executing program 32 (id=393):
socket$inet6(0xa, 0x5, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2}, 0x38)

1m22.803127982s ago: executing program 5 (id=772):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r0, 0x5)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0xffffdfffffffffff, 0x800, 0xb, 0x3}, 0x20)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./trace/trace_options\x00', 0x0)
ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000380)=<r4=>0x0)
write$cgroup_pid(r3, &(0x7f0000000300)=r4, 0x12)
r5 = socket(0x1e, 0x4, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nodev\x00', &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/current_tracer\x00', 0x1, 0x0)
write(r6, &(0x7f0000000140)='blk', 0x3)
close(r6)
r7 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r7, &(0x7f00000001c0)='bin', 0x3)
close(r7)
r8 = openat(0xffffffffffffff9c, &(0x7f00000001f0)='./trace/trace_marker\x00', 0x1, 0x0)
close(r8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/trace_pipe\x00', 0x800, 0x0)
read(r9, &(0x7f0000000300), 0x1000)
close(r9)
r10 = openat(0xffffffffffffff9c, 0x0, 0x4d8700, 0x0)
read(r10, &(0x7f0000000500), 0x1000)
close(r10)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
recvmmsg$unix(r2, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0)
ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000240)={0x20, 0x2fd, 0xa, 0xa, 0xfad, 0x81})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

1m22.537754259s ago: executing program 5 (id=775):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x20000080)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0)
sendmmsg(r1, &(0x7f0000000000), 0x400000000000047, 0x0)

1m22.353668823s ago: executing program 5 (id=778):
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r0, &(0x7f00000020c0)={@val={0x0, 0x800}, @void, @mpls={[], @ipv6=@udp={0x7, 0x6, "b21358", 0xe0, 0x11, 0x1, @rand_addr=' \x01\x00', @empty, {[@dstopts={0x89}, @routing={0x3c, 0x10, 0x2, 0x1, 0x0, [@local, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @mcast2, @empty]}], {0x4e24, 0x4e21, 0x50, 0x0, @opaque="5c012022f78f2747cd6ec1de9cea4b333be8cab2b2498696d5032ffbddb186c9328e061359aa17cb64066f5893cc6e2a2b2cbc158f3cf666fddc365a707a89c26ea9352beaef4004"}}}}}, 0x10c)
socket(0xf, 0x4, 0x0)
unshare(0x20400)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x7ffffffe)
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRES8=r1], 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000150)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000010340)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044090}, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0))
r7 = socket(0x2b, 0x80801, 0x1)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x61, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001914f77a12f902002abd7000fedbdf250801010001000062fc000100000000000800010000000000080001000ddcd990bdd804a50000000008000100"], 0x40}, 0x1, 0x0, 0x0, 0x20044040}, 0x10)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0xc}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x44, 0x2, [@TCA_CGROUP_EMATCHES={0x40, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x30, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0x6, 0x5, "4b15"}]}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x84}, 0x40010)

1m22.094235739s ago: executing program 5 (id=783):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0)
write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x482, &(0x7f0000000600)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r1, 0x0}])

1m21.813654446s ago: executing program 5 (id=788):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0x4, 0x0, 0x3, 0x4, 0x0, 0xffffffff, 0x0, [@sadb_sa={0x2, 0x1, 0x4d2, 0x0, 0x0, 0x2, 0x0, 0xa0000000}]}, 0x20}}, 0x4)

1m21.053465414s ago: executing program 5 (id=803):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0x0, 0x401, 0xb2})

1m21.009699475s ago: executing program 33 (id=803):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0x0, 0x401, 0xb2})

32.674878251s ago: executing program 6 (id=1293):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)

32.511583315s ago: executing program 6 (id=1296):
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8)
socket$netlink(0x10, 0x3, 0x13)
write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d)

32.2953046s ago: executing program 6 (id=1298):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000), 0x0)

32.271006401s ago: executing program 6 (id=1300):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0)
write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x482, &(0x7f0000000600)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r1, 0x0}])

31.970385558s ago: executing program 6 (id=1304):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000040)='rootmode', 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}})

30.810767255s ago: executing program 6 (id=1316):
r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x18, &(0x7f0000000300)=ANY=[@ANYBLOB='@\b\b'], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0xd, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
writev(r1, &(0x7f0000000540)=[{0x0}], 0x1)

30.788549456s ago: executing program 34 (id=1316):
r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x18, &(0x7f0000000300)=ANY=[@ANYBLOB='@\b\b'], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0xd, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
writev(r1, &(0x7f0000000540)=[{0x0}], 0x1)

14.634508456s ago: executing program 1 (id=1408):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x3}, 0x8)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc)
r1 = dup(r0)
write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0x32600)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x800000, 0x0)

13.451310143s ago: executing program 1 (id=1427):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0xa)

13.229609509s ago: executing program 2 (id=1421):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c)
listen(r0, 0x5)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x3c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x6e22, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x8, 0x606d, 0x0, 0x11ff, {[@md5sig={0x13, 0x12, "0e95cd0fb083e7d135ecec0400000041"}]}}}}}}}, 0x0)

13.16941585s ago: executing program 2 (id=1422):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080))
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}})

13.14946633s ago: executing program 2 (id=1423):
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = mq_open(&(0x7f0000000980)='&\x00\x12|\xd6hJ\x1e\xc6\xea\xc3\xe5\xa3\xf9\xb8Bmp\x9e\xdb \x86\x11NLd\xe8\x8b\xacg\xf4\xd9L+\x95.\xf8\x00\x16sS\xef\x15\x9eii%\x7f\xba}MO\xb3\x82\xb4\xe8d-P\x99!\x84<,\xc0\xc2\xf4\xe4\x81\x80\xe4Y\xa9l\xf3\x7ff\x96\xc0d\xd7x$\x83\xb8\x80Xh\xe4g\xcdA\x8c\x83`^De\'\xd8\x18\x99\xaf\x95\xcd+\xa6\xa7\xda\x9bmT\x96&\x93\\\x93\xca0\x88\xb5Iq\x91?\xda\xc9]>K\xf4G9\x00\x00\x00\x00\xc4\x0e\x9e\xd3\xb5\x9d]\xabe\xef%\xb9\xf6Q\xc2\xb1\"r\x1d\x11\x81\xf7\xa0\x87T\xb0\x86\xcaw\xdb\xfe8J\x86,\xaa\x0e\a\xc1ac\xf3\xddf\xa4\x05\v\xe9\xf0d\n\x00\a\xdc\xea\x87\x00\xfc^/\xbcdD\x87\xa7C\xef\x85\xdd\x95\xca\a\x87\x16\x90/\n\x14\xb9e\x15\xc4\x8f\xe7\xfd\xb6y,~\x1c\xf7\xb7\x84\x02\x82T!\xd2\x8eWL\xeb\xdd\xe4\r/\xb3M\x00\rd\xdc\x944\xdc\xb3\xbb:|\xd3\xc8\xfb<\x9c\xc3\t\xc6M\xf9\f\x8c.\xde\xf3\x16_\xc9\x15Ua)\xf2\xbe\t\xc3\xa9\xc7\xee5{\x8f\xa8Y>\b\xfco\xab\x9b\x9f\xae7\xa2\xe0\x95pVl\x914\x86\xe0\xc3\xc2\x90\x9e\x9f%\xf3^\x107\xe6\xbd}\xfazE\x85\x91Lk\xb5O\xffK\xc9\xc8\x8eo\xeb)I\xaf\xf5\xd9\xbe\xba\'\xdb{wQS\xb0&\x92W\xb0\x87\x93\xf2\n\xc8U\xe5O\x1a\xfc&\xe2\xe4g.\x00&Z:\xec\xacp\x9a1n\xa6\t\xd3uc\xad\x0f\xd2\xc7\x0e\xc13J\x9cZ\xff\xdf\x8b\xd9\x8b\xcb\xe9\x90Gc\xd4\x83\x9a@\x86_\b\x00\x00\x00\xfd\xce\xa9\xe6hjU\xb3Qt\xc5\xf4\xd0\xf3\xec\xf8\x14LH\xfa\x13\xb5\b\xbek\xd5\x04\x8f3xC\x0e\xd2\xfe\xd8\xa1\xdb\xd4\xdak3\x9a\xb1\xcfX3\xfc_\xae\xd8\xe7aRa/\xf5\xdc^\xfa\xf3\xdd\x1a\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\x00\x00(\xdfJoa\x81\xaen\x88Z\x86\xc0\x05\xa8?\x86\xe9\xd2\xb43eA\x14\x01\x0f\x85Y5\xe5\xfb2\xa6\xbd{\x1d|P\x14\x82M\n\xcf\xa3\bfk\v\xb1Y\xa3\x16AE\xc6\x11>\x93\x05w\x87\xed\xb9\xd2\xb6\xa4\xfaT\xfa\xda\x91\x11\xb1*B\x17\x03\\{\xa0\xc8\xf3\xf7\xefYOs\xf7\xdc>\xd9,\xbe\x9dL\xdf\x0f\xd9\x8a~D\vU\\5\xee\xb8:\xf7\x01\xb7\xd1y\x83\x8c\xe6\xb4\xa3KY\xf1\xc5\xaf\xf2\x8dW\xaf\xf2\xae\xed\x01\xa0\x00\x87)A\x05\xdae\x9c;/\xf4/\xe4\xe9\xec\xb1ga4\xf9f\x1d*\x9aX\xff\xb7\x96t$\x05\x11y\xef\xb4+\x88db\x1a\x1e\x1f\x00\x00\x00\x00\x00\x00\x00\x00', 0x40, 0x80, 0x0)
close(0x3)
mq_notify(r0, 0x0)

13.100093992s ago: executing program 2 (id=1424):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0)
write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r1, 0x0}])

13.099145792s ago: executing program 2 (id=1425):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r2 = add_key(0x0, 0x0, &(0x7f0000000200)="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", 0x559, r1)
keyctl$KEYCTL_MOVE(0x1e, r2, r1, r0, 0x1)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)=@chain)
keyctl$revoke(0x3, r2)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, r0)

12.887441257s ago: executing program 1 (id=1426):
r0 = syz_usb_connect(0x5, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040490d0070010001020301090227000101008032090400000308065000070501020002000705820200020007058303"], 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$midi(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x499, 0x1021, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x7, 0x90, 0xd, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x8}}}}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x2c09}}, {0x0, 0x0}, {0x0, 0x0}]})

12.357315369s ago: executing program 2 (id=1434):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080))
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}})

12.34264538s ago: executing program 35 (id=1434):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080))
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}})

12.139743324s ago: executing program 1 (id=1438):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0)
write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r1, 0x0}])

12.109779875s ago: executing program 1 (id=1439):
openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80)
socket$inet6(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x3, 0x6, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)
fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
socket(0x2, 0x3, 0xff)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x82000, 0x0)
syz_usbip_server_init(0x6)
openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x0, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6(0x10, 0x3, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$inet(r0, &(0x7f00000004c0), 0x0, 0x0)

11.47494788s ago: executing program 7 (id=1444):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)

11.47393855s ago: executing program 7 (id=1446):
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0)
readv(r0, &(0x7f0000000780)=[{&(0x7f00000005c0)=""/56, 0x38}], 0x1)

11.393774422s ago: executing program 7 (id=1447):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)
r2 = dup(r1)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x1, r2})

11.389573582s ago: executing program 7 (id=1448):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0)
write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r1, 0x0}])

11.298987474s ago: executing program 7 (id=1450):
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, 0x0)
socket(0x28, 0x5, 0x0)
setns(0xc9, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
socket(0x8, 0x5, 0x5)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$alg(0x26, 0x5, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)

11.195561636s ago: executing program 1 (id=1453):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8)
bind(r0, 0x0, 0x0)
listen(r0, 0x1)

11.072392899s ago: executing program 36 (id=1453):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8)
bind(r0, 0x0, 0x0)
listen(r0, 0x1)

10.521764182s ago: executing program 7 (id=1457):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)

10.511879523s ago: executing program 37 (id=1457):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)

9.619851053s ago: executing program 4 (id=1463):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/trace_pipe\x00', 0x800, 0x0)
read(r0, &(0x7f0000000300), 0x1000)
close(r0)

9.593482114s ago: executing program 4 (id=1464):
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000bbdffc))
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0xa)
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

8.536056349s ago: executing program 4 (id=1465):
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r0, &(0x7f00000020c0)={@val={0x0, 0x800}, @void, @mpls={[], @ipv6=@udp={0x7, 0x6, "b21358", 0xe0, 0x11, 0x1, @rand_addr=' \x01\x00', @empty, {[@dstopts={0x89}, @routing={0x3c, 0x10, 0x2, 0x1, 0x0, [@local, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @mcast2, @empty]}], {0x4e24, 0x4e21, 0x50, 0x0, @opaque="5c012022f78f2747cd6ec1de9cea4b333be8cab2b2498696d5032ffbddb186c9328e061359aa17cb64066f5893cc6e2a2b2cbc158f3cf666fddc365a707a89c26ea9352beaef4004"}}}}}, 0x10c)
socket(0xf, 0x4, 0x0)
unshare(0x20400)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x7ffffffe)
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRES8=r1], 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000150)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000010340)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044090}, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0))
r7 = socket(0x2b, 0x80801, 0x1)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x61, 0x0, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0xc}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x44, 0x2, [@TCA_CGROUP_EMATCHES={0x40, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x30, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0x6, 0x5, "4b15"}]}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x84}, 0x40010)

3.672966764s ago: executing program 4 (id=1468):
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, 0x0)
socket(0x28, 0x5, 0x0)
setns(0xc9, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
socket(0x8, 0x5, 0x5)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$alg(0x26, 0x5, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)

3.235003434s ago: executing program 4 (id=1470):
openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80)
socket$inet6(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x3, 0x6, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)
fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
socket(0x2, 0x3, 0xff)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x82000, 0x0)
syz_usbip_server_init(0x6)
openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x0, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6(0x10, 0x3, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$inet(r0, &(0x7f00000004c0), 0x0, 0x0)

2.641549228s ago: executing program 4 (id=1473):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x7, 0x0, {0xfffffffffffffffd, 0xc3, 0xfffffffffffffffc, 0x7, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r3, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
syz_fuse_handle_req(r1, &(0x7f0000006340)="7c7a6a069306f2c5ddf91f36944f207a1bd11284b4445fa3507bbc5def2e6fec4bb7c6001eafe381e277221f30085acd5d0c251f7c60c23874c04db6aa516f773dd2e57e746d1a085193c8b7664fceb1fe764d87f4395c66e5d4eee443a555692ebe80f3a11b8be74963f1a18c1d0cd71dec65e609e065e14615d2e8b283e55b4aa8b485f81ce52443d61fac9f08cf34f2997c05a63f98f988cfcea9a5650b37dff5817e5033b3912c226bd9bf68b528dec710584242fbdcf7dd0d55e394d3742039e6960bb589fb9ba18ac8e9e82cdbd08e9b584d0a8224cae3e9dd91e25699549007dc0d99165a73cda1c99fc48f6bfdb900c60e4481222505c58cc1108fbaf317d361d1f2d78f6db6e14b283ca9f1927f4f8a0f6f52818be03c7b257aec57f06a0a4279131a2bb0a13b23ab188ea50a686abb2f7e4d0f7a166f358e4cb886b7fbdf51cd9a153410dcc4cc5db7e8e94cc9ba2371a328480ad20f51d7fa012f367a0a8f9c882c47b5f714f0e1b35f72b2261989513c1428d648aa8ab8c12c87dfea38d5be0d49097fce804c9cd2ac8f61b68579853129351e3bcdbdae3371d2b12a150d94b3097161c226c50a1d2c1f8b4c10a986e21dbbb854ad1d26d0ce5d950835d14664ee8f58c537f5256b761b4707fe8d46cc1658798d285310a1cff127b1280cab3f1f633569391d5a7cc08aa1d108b93c38df397d90bbb81753930934df7dcaf8f960dff660fe239aa15cf48872668cacf4d664dc0809fe9d780ab202c3a968abb56655267c907eb3343809b2407105a5c14d53a3b17a9a1552314d27e13daf48a2bb7b2c9fc15aba9ae1d6325c11fbe8432c067efa72878ca56c6463b6cf4d29646905422908a4a1f7741d0049febed4fc2b7cc27154031e50a0ab297826383935bef6a0f968db92128e8a940509b5368146bdcacc852b9d0b4ae9624635f9e69f3a7bc8e6f3340c7de46f49feb20a46f11aef464fa6696a60865bdd0c40b1c411c9661fa9f6393a33a7eb4afaef3eb1ab4634a42baeea780ac6c0c4fc8cf7a92cf0592f993ac85bdfd6c18ba4b7cf4c4438a8330413de8365b4a080234f59edefca0c5ce9697b20cc7b71d04438c00cf3d557bd03b5e1b86e167d2d6e09714135ef720667d0f2e7ca54da419d1bf6722eda31381059216009cd8c99ba1d7f9ebc1bc021457a195fa5be2f0727a84cf4cac5e080f22c836a4955d5ed06bee2eec0d39abc5f459ac43596fee3b341dfbd7ce6f4e57ea42e1e8d4f65880b8b77d2ee27dc1efe95ff1bacf5aa14933456b68645380d0f2ef6284b9946857456d64f4cb656998e99e3e286f596b31c69a69d0ee8444ed838ca2f0ead1be9538e4e927239d0e65a3f871dcad33881f69592eed93a9fafc934aefa67bb87d582d0ae4cfbb5c50325774bbc259a277749751228d3610f95fd56e9fbccb288eca1b14c8255b6996a59c91efbb08440ed91cdd53b0aab82600906904cee2a117a06157e24fa822e1cf4f9db4c2e8a5e842cfc503e578e69002fbae194b6bc7c8b69aac7359292109b712eb49d21946f5ea2745ab77ef59950dcfd926df2aef20e85f2a14554aabb417f15c725c73edd4853926ad6c525afa2c65de213cee799c18d1ced9424d10d7076fc5862579702a5f91031381f41cb8d9899ab514cfa1c8c51437df9710271d8cf69e8900921cba296703f1a7b5234500c1625884fea594d836a930b06142a6e577cd9c2a32cae65e712624abeeffc423a5d5ed7bd75fcb1a82ecec8acd0da9918a5c7c189f14f8cdf37062f93b87f9188501556060ffc6eac435cb1624f2af688316366e03cfb869eacf83d9d45fce910c3347f810b614c2e4291e70471ca2b574241c3f3d9740c6a45c7296a2f275acbde72e513ef4e5a1123a57c2eb1bd023af716c16a7747204338f60b6e3ac514af50b21952c21592aefb6149828a5183ba581d5ee8647f374645ff941bab67bef760ce353b456c4b51c5d3a0c5372b1773b944ad67a92937dd838e1b6f550a1dca975d6230e430bcc278afed54e0621008b2f850107b0244359e3747be5282630452d432e5df0fd160795effed150f9396a7da5a1e4dce0c8f62280ff2fbfaa813859a671208b4b9f05fe450729b0efad83a790acd688a90e5fee5550de4ddeac70ecd125ad076c4e2b68652e6ea520e2b6b339b4b9dc219d853e06b9aa79d022e53607213fc254e15ec3e6b776d2b562997e0fe52b98c58e1c0316b22a4219460053da87e7baff7dc1892c2de2f324dd1169b977f3a6698d0234c78de3e46ba5824f3e373f264e8d28fbb4cc108a41fdecd4b629d92b0a65f84366bf504eb5a894ba40c89f9df854dc469fa174ac85cb8d2adfdc099ca9848a1032b2e2f375bd1544dfb69e33492e1a4b921ad7ff17c4c7e357ff69f42d2301c302ee2ed313f0e9a20ebfe028a8737d6e38bf179940179cb779b70c2276264cb4f23249db7d5f179baa842b70f5b287cf74ce1ff6b70a56be8f2fe15aeadca229804923d28a793838bc605eaf5dcd362f757577ebdac54b09fd73326720d3522d002a41a3b5f2450f48286a5ea45836b5ee77fc415f47e0716049ec2610d607737fd5a73b066b4876f9d744f6b3486b088dd3bfc3d393a27c6c799ce078e2ee348257b5ec1ba9de76da2a67ca912dc2dd5afc70834ceecbb8bd41f6e790294cacd5891bef1b4e2124dcd6dffdedee8f16b3bddc030429dcb0f98e6fe0649cb14eed3293fa4933b2ab8c0ec0ff4dbbced1e32dceb317252e715b872b00478cbd7b0275b7394a0ccfe9887410b32f1ce9266b3b83470ec982cf908507d3ad0cc366bff3759388b624701b3e0dc0e7928386b155b50b42a8e352622516beeeddfb79866a2eb1d360802cd19d62fd171267a0fece5f54e315a8cd49c41072f2a7a0baab5aadae2c1ff28e285b642f8d3869321bd18b4aed107feaa12d055b179a8ab7b50e2796d287a196e280d527b526c45c8aa98696d88a02d923d06fedf51336c0695c218e70448073921971093ea44b5352e10ce6cec26d082b93f69958165bd986f56650a62224c2d9fd044bd8fefd33544c6bd141b4cc211a087fa57c09e195c8edffe559048db738d1395f5e2625dd7cd035b8c76aad6c238fb52a7c5ff0965fc7122a5899746ca88abd699d6078623722fff92726e18613519f2b1927504fd5cb7a38ffa373c3883022f0387953530834affb5f05e0f44c24caa75561b2b63994493ab857fdc30900586fed09298d846e5936869b43d81c4b91902028e57a8f2da16355ccb7a77d29ecc8e66015e979b2f3edc5b8d77c45348dea55c9ed6b7465acf899f4bc1a7edcae0b0daf69ff85c504eea1294620b6d3dbb004575044a5ae7c110010c2cf39827fbdab3b42ac35d147fc53bb5e7de6c47091dc80c14b8da494b2e913d1a52085e29af19edc4a417346c5a896a3851cb6132511e0627d190b77623c8a3bb6085eff22ede7127f7988a1d388fb70ea20d5c1b2424c5aa83532bc5162a5d177968b4a46583f2d4b92d04a5f19145221aeaf724d92ea1d4dfb53021b47585bbe5ce35f8d09a83e13fdb1de8e52dc646d41e810879ce9c830959c3ee93f11a16d030d141863244395e3f847505fe6d9594a34009fec9a743c033b9793335684cc5c3d0eb0ad094f40a60264b02cd88c583c850d99c5b9c6c5dcef467ca3ea38f2aa42f5657cd940aeb12960efa18d571e4f958b9cd90918e069a486d84f214617ce29c0f2c26bf84f12f5036f26a8de0c8359f572654bf5ee06d38f741c464976d95ae3fdda45c2ed2d08ef71d3590e82d235e0fa357c568158791a195d4a2d9615e1edc85be64cfd169f925ffc4f636f86783cf43624a77bdb9b172228097f02f391df00668dafbd9932298b23cfadfd1b8d14a25cb408a440f930f0813de73c1eb2eb4b3c802d718a672453d0038965c6dc98db96fb4e06f1fda72782d0839d4e8b477ebdb2c73510db44f643ec7dc4fcb837806853caa35cf622aff9d44381d3f7adae00650cbb6f0334ceca14ec982dfb5817d7fd49251c203b6463a09c14885f754603291ccf0a7ceaa57284ee751774fa5ad72f9f7a32fa542947af40601e98057895f2869d4ec2db0d73930962535fc9e12ba7e6777cb458592bee505b367012ebd27b256fa0fac1452cf3b28eab573549b7c7a13752ca0189768f738d5f8030fe999f7bdc466d67bb32937ae469f1a1e21fac2ae2ab92a0a260bf0e9ce20625e82f88d0ed4d13876aed768765d77433bb9137d92d622df502aef574de82fe28063128fe5a1787ced99734c2f3f221e80d3baefd367d01d950ee1bc981b4b5ff86b2a96ab78fa3c1201303cab473103d89bb185afc77dd2cb7ac1564045036fe9fcf85af5d73a7553bc45bf5e221564540982db2f81e612e7c1715d3498b8d7851c0160146d6eaae9e30c81dedfca8e7122fcb69b26b396629b723f1e1822b8d5d8f2ac583728a5ab40010f88aa42f37f2031a3e99d8d6661e63f86f65af521066ea6af89c89e1748521b8368cd03409e895a941025ee777653f55e66cd1a0cca21308666260c3b9a306ddadb322eb1d09f7b27fd570cd35b6ec88bb391e3ae4745e17fb4dd7aef1d75b4ebb91e6e7789b241566d7c0cc97a3a126ed50b0cb621e015414f62641afd85bad78470463f86d8287aa56d331911c23c4cae8e5dfea33f3789c03d61f51c590417b5ff9f1aa35ab6a15364296c5f9399216ce565210a4075ac5e43e916850774a127f9174d95b43d839e056b4a7d679bb8804951ca171c0b59f4d6f32c4fe8f908b9a1614591f5d1e1cf3348e02317ec4655c693417a4c4e7007a8db02faa1634f8eea9c9bbe5b149ce2279953a54884392dc7251dd38670fd59d9d1da5203340909d50f779e864339014bcb545d825cdcccedc558a1d01a2784b8f499ce9fa2ddb0dd1dc0b93d1b282a96cb4ecf152474dbc4b2853b30c8e5fcea85bdab949f5eb1e98d81c102c349f680230082db5aba9e20209c35b16598507d28211b49763b598a7e60519d5b28b67c027cb2657cf2ac7c7455291fcfe63f0b43afcd3afaea934da97c209d02e5b47a686c1c284aeee5d662fd9d9be7c576259d9f1a36fc0f7fe329a1da1dbe078381233940745fc28a56db98b1a8442325168158e3f0b3cbf8a368d19dd20cdfc1c4f3893a30a49223050159b0bb8b7c59ca705ae25453988d87ca6cdd2bd2fe37847ba67cbcf7a494925a8598b7b50a741c9ced10ea08e35c422b79265561a07f40ebb89bc46069a1c1ad95949fe757a76ff6b5386a043abc967c367a9d86b54d374e573540dfc1f6d396f398abe9735f523b778fd124ac1e1eb832a66dd4b1838a50e6a4eb1b95b8a60a94f067b24d1194976c539d5ec287a261bf25904575be3ff49e7411a8dc09739649828124c14fc2b89dad1f3f5725db2e45f5a447cd3e4bdf9e1e95c5ad7c76fcf0c1021cb6c32e6985e1d113030d534eecb0dff2554183ee18da2da5d21a8b994a81f05e0e6ae89b20bffb4be333d1956270da23e9905830921b1f3d615a56a20b11d45ccd1d22b910e33f475a92c31fa5b4675ddee18336d0ee7b75c07df2a9d4ad53d83142219a00aef15e1e9dace0f039d63a530fdf671a54aba3882dad0d439632af5576726c3aa095cc1a0a03063e8a6581b78bef501acc24b05a0150d8f683c90e8e5e283a49f898906dab926e544ead48cb9bf9a6e1bf140b5273443b8cb8166b2d8a5464a3e9d9f4246ac81ea91b33a0b399dde9f5efaf792bb04cfa028f40b7c92db2d9c33e16ef58b9263350879ea94e581a1187b2d1931b1cd7606a76bd8943b7c3098a33bdf476960af7bdf2854b1336e72feb603b8bb2242df0839d157843d369a50a615068ff5d99ecebe8dc19158a6c654e853cedf860a727bf8140c062f5d307fdcd150ad0af03d2c3a913b91047858ed6382d2d2d30f5c0bd419c2cd4047f225107ea8bf4a3a69384f16b5b5bb2655bdb750db4e975794592987df95f6a90374b0a08769b2c957faa16a21270196afba76b4527f01f0c5db7fa16e2da81fc49336e20bc3ee1ccbcb62255c84513d9ceb706f03c25000517070c03b7bce838e6b6cbc7f767959fbd62e11ab7ea6d760cff674a4296e6185eb348028b472290922160f3ea36c22c8375a016f505017c0a0e041dd8e52b4f19ccfc701109a19391a059d77db239d40a06d84a6f0ccd08aaad764e53ad1da19ee825a4d25ca7cd538289bffe135486ec1614e28b3682c7081a1b0a2c7272f4e36f6d0d9e68d84209126dc59312d48eed1c63c90efeadd472259392c28746abf394c5c6c97d3fb00b70a74c313a817ee1719c33f16d58f297fc7eacbca5803df115745079c5434e851ad6c1f0e8ba0bdbb66cbb6789b89a23526b476ad0f2cea0907e72702f93d37bdfe7b39fb9b33fb1111e58f5c45db8cc38afe4e03a318aa0690afb870a67aeda7da9640fdad1e1f551dd4757c69b4f523b616e502514a2e35495916f2e5ddab1ad9534644d99ec56e818caba173773aa5e45104deb869b23063eaea5542d3bc503a6948b83779aa46879443cad02477451b46429f1f67560c31d4377f96031ab94866a73be753c4ab91cc6576c3991c3423103ebae604e887c56cbacb9e95b8b46300b62e698a6456a0d175cf682eacabbe301e0b0ea34f963daed0dc6c1b75fa5e3870959913e69e61911d9ff646e9c6bab33fe566871027e861577c4d7fdfdf94ce7ac1a3f6d29daf28d660431a89c0b56c4b95090e2ca5df62c1e5c5dbf98f067751819d4c5914aa33883b7b521aab30d14e1cfae74fcf3ad4b2cf9448009d3223ad984e0c50f92d465573a6fc2894f8a5d4e855316738ecfd6a6c157d39b5c44d80a7cba944cf9f7a701899859821cf2bc248459f7a350fefba53c1481a7197f024f2eb74251455c06f4b82dfcf3ccf3e3b98b898fa1b16c310125e5e9fd4019acccbe91b4d842ddd52ee56f6d3112dec80159d6d3ef93bca70e7afcccb223361c39addbe3c429934cd0ae35f36a8f6309f08e36b27341db1f21fd8a148b239361b31a85f53bd1ad49fadace6c64d5f4363427fb2f268e8aec6d81cdb7f1252baa4652dc55881661114bf98cdf17190379591f0e22dc97e790f53f463bbb0ad0ead78ddf7dfe2e26052acc31cfe52b822afd5ec5c75957106cb5c368c09252ff3e4f624d90e599279fb985ecdb7d8880dfe05ac2d2da83e34e2b9b88f5dd60107a4509902fcddf4a36605e5c7a2606a4aea9fd4b5b24ca6b67d6945d133869cf9276d8c30b08c2a9f4bf03f4e0b956fd5f3c80b958ac5c41e4115b6708799c3102bd8b6c7fe17ff8c3f89c7437255faf69d1e16074086dd44d038bc0211ac74743169b462dbc085d77bf45eea72bf8348308bf48feea02d739a0fee9fbf71023ef8c6828da1aec8618cc2345ff663f88bc52a990e6b9591425435b0c7900ea4068f5aa6345e94254e259a71290fa23281658a6a165d1dee10dcb355518264824665ff2c5538de9ae4487782911f79e0bb09bc2c2d8e0d91b33cbec839075c9b38c848e9d2fad7368e96c1932042c3e85fd95b7d4500e6cae9e649082e9d5ca6f2cf91fc7ecaccc1049525d4325003424cacbd6eb5b8cc30b6893bd1ef46a8e7cbcc87dc2dda5c802ef1f8bb607c7457eb161254dc0feb60ed5ed0383fdb4db91d7e41d45c8eb80c1981e801ef05703f97f8710a2e00eb0559f854f700f946937b9e68c75ad6d0015d5d79be5423d0d846bc76f92ea7ebb0302b3d3c695c0aafa83b2bf029a444709cbf2cefbdcc7eaf3dd7a16f8ca8c861e883db10d433f7fec547be45e6829962e430bb3c93e8cdfb342c1cb7e53d8a6ea625d5574c4b4303f61c4338a658e652ab2bc0029c0a78a5114f495a439956909cf42128cb4348affbecb20b7fea98e22160e9a58e7666a00e7b37fbec4bd3860d66a39d1232a57e8cc50710c5c666f7efa98f16f9a02d843c94b0842a383945d06899998ff2fd01ffb58ab53ea89b2c93634c48d0420edb9791b8e451b35b534b8b2874c4859c684cd14afb5335a2555c75ad9df018635bb7131a7ef204ccecfed33a675fc51687e3f8818406fbf58e7b5fde1ca96153817e1b632e89a78d967eb6a34af1dac0d9ffa448b7b9bac27afc305a7b47febbe0a37036c18aef6852b1b2759d67479f9edb169e796d949844a1624b1e832a2eee9be36dc5866d6fde431cfcbd4e305d322c9dd07f83b5b361daaa74bfc9fbce8b447210c327468659ecbb0a5fc20d0cb79de7d1d70bf251c81d5f38711f3f4bd4752685b077058beb465711b1359d2a7d2f59216c5a807121bb97e7ccacc46526e4072f1d6de3b487d492fed0995e2273fa3bb115bd08d32d8e57eb2aa8f9d3b81babd1b8334c3a5e69422b75502ced3793d07b9bdf38e9d9fa1d2e48c7886dfc41985e8ffc49f09c4ba58ddc3b4cbf562b591f8939ced5d18214a77cc753075334a157373cc33cbc07a731cd6342492f5e05f78108e627bc88777203c76632bbe0120924c7a51bbfc9dc789a5695b7c95ef544935032fb81d499c454a2d78727875c20bc8a48a9f23cf6595c17c9cdaa8d04bab8ac567ebd3bbcdb40e11f1893fea3970f176f75f38d17d6ee1bd4ab76c660723a776bc72319199ab82c40ac4a9f4f475e8fd4643a4be8601cb5172e112c236c7c430078601bf183a59a03885e994c1116a9d4ef275790ff2417ffd85b43274fc57654466fa394958aeb11f343c3439604af13997011af70b67df1a9dfa4cdb751a2dc3e5bbf42f7b9ebc6dcebb2dbdc57d7a2cef7409dba307b7cf6eab148a924566341d035cabc877c68d0fbfaebdd39c16304b63a1bae376fb4650708bf5695dfd7ffc01f43f0021f622de0b116ea494454497337a0ec469963de7f9d2b1d6c5a7a0a7835777a78a2b9e16eec696446981d2fea550f011419b96f7b2018d027b87fc715521b0302bd7b5b3bc5f033346029eced73df07dd1bb1f91848376b40b9e9da7233e7832edcc7b54ef6fd320d19efce78d58ea7020fbbdf77612dc8a4f3281915ac9706f346e405b9f489f8f2e9a2decb8d18bec1e5f735a4ec69bba4dc5d36c9c1cc50b92fe67b2cdd53fa671c0cbe331abdf46787e7c9912b951aa20700dba6cf5a209fe5c9c61ef62a8e2e572ec774b2d0f42d570633fc44d44826e848d47a8f386a5704e0a3eaf1d06617181aeb166334ab55d5aedccb27abf19a42a480930e25465721336c70a2ea7799d21a3659124ac9503efc99c1b13ca2b9723e3e338055f9b3cef7502017ebbb09a64b06462db353a5c562101cb7fbf29e056deeb1ff0c7bc877210c941c87401ceae52bcecc83e87655069ab931bd813c1a87d67554f5d2cf435e6dd92a515c22f5d5a9a44ebc81e9c4849104343b80824005619312a9e349d996e366d381da42edad1a560bf5e31ecd049e92ceaf42954958600a7868599fe10e9b34587368d3044250c3d1a8ba6c8dcb6d318d4f9e71c2d33fc74cb57620a8343258d072f3aa767b4b178f3f66d5a713dae2426296c12edf9ee37636869e30df64cd3855fae20bc7602c1b7e6c8246ed4be71231a5ec7b5e7a9ebb08bf8667d8f2900ecdb0a0addc14a2328eebc448db13013e6a3c1a661065e5ac0a04b5171bd84c9d9d947a6c31257ed13a966530c5e20168c100117cf82b4c00ea3ad00ea65e1af89535b3f11a1418ddad33db8cec281543732d2ff4eab54b12cc95f7d872e75bc01bf6c580540b0e26413c6c2321ddfb0447bdb6acf05ddf2bb92534a3a5f37d6da882289f6fefc6a213cdfcf34902137fa3b982b2b4c27c611f08909a18405482f1e3a2bf3635d3e970457541da16e37bb3c422cceeb484bb64c78724431a543ecf4ca851914c1555e3b785ec87bba3769927f6c29f80e7ae8632bdb9acdddf7c3b5580740d9b2bfc25086c9566844136f3fac74f429121f86c378c68c20a194b0c98b1e92991954cbf60477e217a2e25297fc7b18972e40c531ec19e1eea193bbc8893392d8528c6a0375bcb4b082d20d5c47cb330bbb4b74b91ab55d4a0d3e1dee8182c581e8e70ac30108eeb7185c6ea3f786881ad124e1404651ee95cdb0fbb0d0f4a2b43c795ec1cd4e46234a88862d57903ce878b641004fb637341e5d6bf5163f1a3467b828f6eea96c3c2bb79503687867e11eec32dec452e0fdd2eaacfc0a477ee839ef049855da734d18212142dfe2a95ab9ad9bc4f98c3bfa34134c7e6c9f8669303314d4e8c1bc5475e8fcf418cbdb3246ebf393d911cdfee8f2550dc1593ece59ced81a4ffb2484f9c8ebed0aed8d418138445c4e96b209adcc4afd70f09901662daa2c8c557d6039768d97e6b9518f0de4ac2e0187ba08a4a9128d3e632fca102137338b5e568f12c7bd28db772c800fb5f4d4e683b201840731bb7c034235cd73313cde88891bbb31597bb537696e6c987302297f9717b8053779aed447d33ef9129e84d3031fa9b453bd5731fb010ffd19a9133e0ccbec2461cdd31ba294d68c60a8535b15584bab6e6d0ce6c1cef4755bd5f7d90f4debb40af1437a19a96ef9c0709692156152091c7efb58f2d39a65b96416dc09e8091ae08d9be5235a3c1ec062862baa1aab788f28e83ba4635cecc6671f2320f42b4f711e7d0fcad89d6727d3630da1ef35e32dee39eda665946abe6224f17f2acc29e62518fd51eb7f193d9bb16c38204069098c293fdce24c1c79229fd08622a4256b581cffce12e46c20248dc902753f0e3c91f9685b3d45f984620e262b3487d67d152f1c50de3fd2067a9d3debf715f346dd2f712c55545336a9036ba82bb06cfae59a48d083c3388f77790c9639fa0a9c33f4c66c7513042bffb765c2a4b3657dddf0ea094d8d79018f66c8ef8e9df980a89906275edf4a467a5db0a623976899f0efd167aab6ff385cdde59027a95a570277cb94ebce503906c28527e3114eb9ed739d0c2f4cf82786b35c0054718f47381ed8ce9b107e1f1019be5fc877166da667036f0c1b84e2b5118b5f4babc052d997e5f1e8c4cf45eb26430b74d9e1df3735b8d5df559903143d983e974bed6cc608c2580a991bdd3628ec676d348de8752cafa80c1661f162e35c25fc0ba0198423f83214fed800f9355ac8ea67951cfeeb3736b50c1e14d45d33aa25fc72c38702bd5dd217842e54114f4799c45ff1b7cec9729382ff7fc3ff80cbe1a13d03e19eecd7de676f6791fe34143ae30c97da9623907d974a37b65d0ef5d46b718d58541c6b1902814de71218ca7396ceb5fdacdc3cf4d110862402e7cc6254f1e44e28593fd443290262db75fd482ce1d305d6bf9fd3e5e0efbedac5a4d097650b111e6e9e1b2c66a23ac5bf27ed78d25d1a54c16ca4287126736c2f17ab73e683798c29d16481775ada8e20d94b00b6b29654b18f60e2853fdc7d3ba55d7df660db90288b6f440efd19f0478047b12c7b07ab2b1c9529597e6462d20612e6c3b6d1b1d11305f8ddc811860450504b7cbf9794edd0d07c25ab6307d74afdce958355eb919dcb1fcb8038c6dd5e774ee398dc8553a9ddeb551f", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
writev(r4, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1)
mount$fuseblk(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x20080a0, 0x0)

1.795870097s ago: executing program 8 (id=1477):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0)
write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
io_setup(0x482, &(0x7f0000000600)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, 0xffffffffffffffff, 0x0}])

1.68745747s ago: executing program 8 (id=1478):
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, 0x0)
socket(0x28, 0x5, 0x0)
setns(0xc9, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
socket(0x8, 0x5, 0x5)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$alg(0x26, 0x5, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)

1.208718962s ago: executing program 8 (id=1479):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r0, 0x5)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0xffffdfffffffffff, 0x800, 0xb, 0x3}, 0x20)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./trace/trace_options\x00', 0x0)
ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000380)=<r4=>0x0)
write$cgroup_pid(r3, &(0x7f0000000300)=r4, 0x12)
r5 = socket(0x1e, 0x4, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nodev\x00', &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/current_tracer\x00', 0x1, 0x0)
write(r6, &(0x7f0000000140)='blk', 0x3)
close(r6)
r7 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r7, &(0x7f00000001c0)='bin', 0x3)
close(r7)
r8 = openat(0xffffffffffffff9c, &(0x7f00000001f0)='./trace/trace_marker\x00', 0x1, 0x0)
close(r8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/trace_pipe\x00', 0x800, 0x0)
read(r9, &(0x7f0000000300), 0x1000)
close(r9)
r10 = openat(0xffffffffffffff9c, 0x0, 0x4d8700, 0x0)
read(r10, &(0x7f0000000500), 0x1000)
close(r10)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
recvmmsg$unix(r2, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0)
ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000240)={0x20, 0x2fd, 0xa, 0xa, 0xfad, 0x81})

1.168311672s ago: executing program 8 (id=1481):
openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80)
socket$inet6(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x3, 0x6, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)
fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
socket(0x2, 0x3, 0xff)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x82000, 0x0)
syz_usbip_server_init(0x6)
openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x0, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e1d", @ANYRES32=r0], 0x22)

1.061732975s ago: executing program 0 (id=1482):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x6)

1.036659525s ago: executing program 0 (id=1483):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r1=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r1, {0x3, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x6}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880)

898.260639ms ago: executing program 0 (id=1484):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x2000fb)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0x3)

837.5401ms ago: executing program 0 (id=1485):
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r0, &(0x7f00000020c0)={@val={0x0, 0x800}, @void, @mpls={[], @ipv6=@udp={0x7, 0x6, "b21358", 0xe0, 0x11, 0x1, @rand_addr=' \x01\x00', @empty, {[@dstopts={0x89}, @routing={0x3c, 0x10, 0x2, 0x1, 0x0, [@local, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @mcast2, @empty]}], {0x4e24, 0x4e21, 0x50, 0x0, @opaque="5c012022f78f2747cd6ec1de9cea4b333be8cab2b2498696d5032ffbddb186c9328e061359aa17cb64066f5893cc6e2a2b2cbc158f3cf666fddc365a707a89c26ea9352beaef4004"}}}}}, 0x10c)
socket(0xf, 0x4, 0x0)
unshare(0x20400)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x7ffffffe)
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRES8=r1], 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000150)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000010340)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044090}, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0))
r7 = socket(0x2b, 0x80801, 0x1)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x61, 0x0, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0xc}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x44, 0x2, [@TCA_CGROUP_EMATCHES={0x40, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x30, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0x6, 0x5, "4b15"}]}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x84}, 0x40010)

533.351557ms ago: executing program 8 (id=1486):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0)
write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x482, &(0x7f0000000600)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r1, 0x0}])

445.368909ms ago: executing program 0 (id=1487):
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, 0x0)
socket(0x28, 0x5, 0x0)
setns(0xc9, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
socket(0x8, 0x5, 0x5)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)

435.093249ms ago: executing program 9 (id=1454):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8)
bind(r0, 0x0, 0x0)

273.418113ms ago: executing program 9 (id=1488):
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000bbdffc))
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0xa)
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

656.12µs ago: executing program 0 (id=1489):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r0, 0x5)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0xffffdfffffffffff, 0x800, 0xb, 0x3}, 0x20)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./trace/trace_options\x00', 0x0)
ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000380)=<r4=>0x0)
write$cgroup_pid(r3, &(0x7f0000000300)=r4, 0x12)
r5 = socket(0x1e, 0x4, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nodev\x00', &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/current_tracer\x00', 0x1, 0x0)
write(r6, &(0x7f0000000140)='blk', 0x3)
close(r6)
r7 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r7, &(0x7f00000001c0)='bin', 0x3)
close(r7)
r8 = openat(0xffffffffffffff9c, &(0x7f00000001f0)='./trace/trace_marker\x00', 0x1, 0x0)
close(r8)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/trace_pipe\x00', 0x800, 0x0)
read(r9, &(0x7f0000000300), 0x1000)
close(r9)
r10 = openat(0xffffffffffffff9c, 0x0, 0x4d8700, 0x0)
read(r10, &(0x7f0000000500), 0x1000)
close(r10)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
recvmmsg$unix(r2, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0)
ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000240)={0x20, 0x2fd, 0xa, 0xa, 0xfad, 0x81})

0s ago: executing program 8 (id=1490):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x2a532d1, 0x0)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0)
umount2(&(0x7f0000000080)='./file0/../file0/file0\x00', 0x2)

kernel console output (not intermixed with test programs):

tadv0: Interface deactivated: batadv_slave_0
[   61.743151][ T5566] batman_adv: batadv0: Removing interface: batadv_slave_0
[   61.745292][ T5566] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   61.746847][ T5566] batman_adv: batadv0: Removing interface: batadv_slave_1
[   62.282485][ T5587] FAULT_INJECTION: forcing a failure.
[   62.282485][ T5587] name failslab, interval 1, probability 0, space 0, times 0
[   62.285112][ T5587] CPU: 1 PID: 5587 Comm: syz.0.482 Not tainted syzkaller #0
[   62.286442][ T5587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026
[   62.288256][ T5587] Call trace:
[   62.288865][ T5587]  dump_backtrace+0x1c4/0x1f0
[   62.289717][ T5587]  show_stack+0x2c/0x3c
[   62.290480][ T5587]  __dump_stack+0x30/0x40
[   62.291296][ T5587]  dump_stack_lvl+0xf4/0x15c
[   62.292134][ T5587]  dump_stack+0x1c/0x5c
[   62.292933][ T5587]  should_fail_ex+0x3cc/0x524
[   62.293837][ T5587]  __should_failslab+0xc0/0x11c
[   62.294788][ T5587]  should_failslab+0x10/0x28
[   62.295602][ T5587]  __kmem_cache_alloc_node+0x7c/0x318
[   62.296560][ T5587]  kmalloc_trace+0x48/0x94
[   62.297331][ T5587]  snd_pcm_hw_param_near+0x94/0x3e4
[   62.298187][ T5589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   62.298237][ T5587]  snd_pcm_oss_change_params_locked+0xc84/0x31c8
[   62.300093][ T5589] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   62.300982][ T5587]  snd_pcm_oss_make_ready+0x104/0x2d0
[   62.303260][ T5587]  snd_pcm_oss_set_trigger+0x74/0x594
[   62.304221][ T5587]  snd_pcm_oss_ioctl+0x14bc/0x1d48
[   62.305162][ T5587]  __arm64_sys_ioctl+0x14c/0x1c8
[   62.306088][ T5587]  invoke_syscall+0x98/0x290
[   62.306914][ T5587]  el0_svc_common+0x13c/0x258
[   62.307754][ T5587]  do_el0_svc+0x5c/0x134
[   62.308471][ T5587]  el0_svc+0x58/0x128
[   62.309166][ T5587]  el0t_64_sync_handler+0x84/0xf0
[   62.310107][ T5587]  el0t_64_sync+0x18c/0x190
[   63.134650][ T5613] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   63.781800][ T5639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   63.784551][ T5639] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   63.968264][ T5613] FAULT_INJECTION: forcing a failure.
[   63.968264][ T5613] name failslab, interval 1, probability 0, space 0, times 0
[   63.970633][ T5613] CPU: 0 PID: 5613 Comm: syz.4.496 Not tainted syzkaller #0
[   63.972169][ T5613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026
[   63.974141][ T5613] Call trace:
[   63.974752][ T5613]  dump_backtrace+0x1c4/0x1f0
[   63.975618][ T5613]  show_stack+0x2c/0x3c
[   63.976382][ T5613]  __dump_stack+0x30/0x40
[   63.977199][ T5613]  dump_stack_lvl+0xf4/0x15c
[   63.978067][ T5613]  dump_stack+0x1c/0x5c
[   63.978889][ T5613]  should_fail_ex+0x3cc/0x524
[   63.979876][ T5613]  __should_failslab+0xc0/0x11c
[   63.980795][ T5613]  should_failslab+0x10/0x28
[   63.981699][ T5613]  kmem_cache_alloc+0x88/0x310
[   63.982649][ T5613]  taskstats_exit+0x360/0xa30
[   63.983562][ T5613]  do_exit+0x4c4/0x19ac
[   63.984317][ T5613]  do_group_exit+0x198/0x238
[   63.985178][ T5613]  get_signal+0x11f4/0x133c
[   63.986042][ T5613]  do_notify_resume+0x364/0x2c84
[   63.986950][ T5613]  el0_svc+0x98/0x128
[   63.987641][ T5613]  el0t_64_sync_handler+0x84/0xf0
[   63.988555][ T5613]  el0t_64_sync+0x18c/0x190
[   64.151036][ T5644] netlink: 'syz.4.508': attribute type 10 has an invalid length.
[   64.154067][ T5644] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.155706][ T5644] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.175034][ T5644] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.176386][ T5644] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.177969][ T5644] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.179231][ T5644] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.186645][ T5644] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   64.473288][ T5652] netlink: 20 bytes leftover after parsing attributes in process `syz.2.511'.
[   64.499125][ T2065] ieee802154 phy0 wpan0: encryption failed: -22
[   64.500392][ T2065] ieee802154 phy1 wpan1: encryption failed: -22
[   64.917789][ T5664] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[   64.996253][ T5677] xt_hashlimit: size too large, truncated to 1048576
[   65.797966][ T4378] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   65.800747][ T5684] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[   65.992445][ T4378] usb 1-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00
[   65.994252][ T4378] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.995795][ T4378] usb 1-1: Product: syz
[   65.996579][ T4378] usb 1-1: Manufacturer: syz
[   65.997408][ T4378] usb 1-1: SerialNumber: syz
[   66.500741][ T4378] cdc_acm 1-1:1.0: ttyACM0: USB ACM device
[   66.505612][ T4378] usb 1-1: USB disconnect, device number 4
[   67.087743][ T4378] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   67.270274][ T4378] usb 1-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00
[   67.272035][ T4378] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   67.273583][ T4378] usb 1-1: Product: syz
[   67.274275][ T4378] usb 1-1: Manufacturer: syz
[   67.275052][ T4378] usb 1-1: SerialNumber: syz
[   67.957702][ T4378] cdc_acm 1-1:1.0: ttyACM0: USB ACM device
[   68.374124][  T113] usb 1-1: USB disconnect, device number 5
[   68.500032][ T5723] binder: 5721:5723 ioctl c00c620f 20000240 returned -22
[   68.661260][ T5725] ceph: No mds server is up or the cluster is laggy
[   68.937862][ T5695] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   69.608823][   T24] cfg80211: failed to load regulatory.db
[   69.691665][ T5753] netlink: 12 bytes leftover after parsing attributes in process `syz.4.548'.
[   69.705836][ T5755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.722054][ T5755] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.738820][ T5753] 8021q: adding VLAN 0 to HW filter on device bond1
[   69.763898][ T5753] netlink: 28 bytes leftover after parsing attributes in process `syz.4.548'.
[   69.776096][ T5753] device bond1 entered promiscuous mode
[   69.837521][ T5753] device dummy0 entered promiscuous mode
[   69.841089][ T5760] Bluetooth: MGMT ver 1.22
[   69.845441][ T5753] bond1: (slave dummy0): Enslaving as an active interface with an up link
[   69.868084][ T4344] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   69.870278][ T4344] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   69.877824][ T4344] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   69.881514][ T4344] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   69.883164][ T4344] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   69.884768][ T4344] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   69.906181][ T5765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.909999][ T5765] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   70.484089][ T5761] chnl_net:caif_netlink_parms(): no params data found
[   70.564357][ T5761] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.567414][ T5761] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.588672][ T5761] device bridge_slave_0 entered promiscuous mode
[   70.594177][ T5761] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.596636][ T5761] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.604050][ T5761] device bridge_slave_1 entered promiscuous mode
[   70.622438][ T5761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.625583][ T5761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.634242][ T5761] team0: Port device team_slave_0 added
[   70.636779][ T5761] team0: Port device team_slave_1 added
[   70.646891][ T5761] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.648517][ T5761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.653506][ T5761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.657243][ T5761] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.673461][ T5761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.705557][ T5761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.781761][ T5761] device hsr_slave_0 entered promiscuous mode
[   70.818035][ T5761] device hsr_slave_1 entered promiscuous mode
[   70.857922][ T5761] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   70.859868][ T5761] Cannot create hsr debugfs directory
[   71.136404][ T5761] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   71.191239][ T5761] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   71.300816][ T5761] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   71.372157][ T5761] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   71.507179][ T5813] FAULT_INJECTION: forcing a failure.
[   71.507179][ T5813] name failslab, interval 1, probability 0, space 0, times 0
[   71.522732][ T5813] CPU: 1 PID: 5813 Comm: syz.4.565 Not tainted syzkaller #0
[   71.524130][ T5813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026
[   71.525877][ T5813] Call trace:
[   71.526562][ T5813]  dump_backtrace+0x1c4/0x1f0
[   71.527531][ T5813]  show_stack+0x2c/0x3c
[   71.528356][ T5813]  __dump_stack+0x30/0x40
[   71.529165][ T5813]  dump_stack_lvl+0xf4/0x15c
[   71.529982][ T5813]  dump_stack+0x1c/0x5c
[   71.530725][ T5813]  should_fail_ex+0x3cc/0x524
[   71.531563][ T5813]  __should_failslab+0xc0/0x11c
[   71.532445][ T5813]  should_failslab+0x10/0x28
[   71.533270][ T5813]  __kmem_cache_alloc_node+0x7c/0x318
[   71.534229][ T5813]  kmalloc_trace+0x48/0x94
[   71.535016][ T5813]  nf_tables_newchain+0x1720/0x1fe4
[   71.535954][ T5813]  nfnetlink_rcv+0xc7c/0x1c54
[   71.536758][ T5813]  netlink_unicast+0x5fc/0x80c
[   71.537598][ T5813]  netlink_sendmsg+0x6f0/0x9d8
[   71.538506][ T5813]  ____sys_sendmsg+0x588/0x90c
[   71.539327][ T5813]  __sys_sendmsg+0x288/0x374
[   71.540106][ T5813]  __arm64_sys_sendmsg+0x80/0x94
[   71.540976][ T5813]  invoke_syscall+0x98/0x290
[   71.541788][ T5813]  el0_svc_common+0x13c/0x258
[   71.542596][ T5813]  do_el0_svc+0x5c/0x134
[   71.543380][ T5813]  el0_svc+0x58/0x128
[   71.544060][ T5813]  el0t_64_sync_handler+0x84/0xf0
[   71.544971][ T5813]  el0t_64_sync+0x18c/0x190
[   71.593583][ T5761] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.622400][ T5761] 8021q: adding VLAN 0 to HW filter on device team0
[   71.683315][ T5761] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   71.698361][ T5817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   71.711306][ T5761] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   71.715818][ T5817] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   71.927784][ T4344] Bluetooth: hci5: command 0x0409 tx timeout
[   72.273964][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   72.275732][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   72.277260][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   72.279081][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   72.280636][ T5312] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.282259][ T5312] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.283761][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   72.285506][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   72.287114][ T5312] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.288392][ T5312] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.289921][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   72.291565][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   72.293187][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   72.294811][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   72.296505][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   72.298167][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   72.300056][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   72.301989][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   72.304487][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   72.305926][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   72.307538][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   72.309217][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   72.310774][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   72.370182][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   72.371803][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   72.384711][ T5761] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.557335][ T5853] Can't find a SQUASHFS superblock on nullb0
[   72.747051][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   72.749298][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   72.821355][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   72.823245][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   72.836240][ T5761] device veth0_vlan entered promiscuous mode
[   72.845745][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   72.847531][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   72.863092][ T5761] device veth1_vlan entered promiscuous mode
[   72.960925][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   72.962842][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   72.964584][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   72.966458][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   73.260279][ T5761] device veth0_macvtap entered promiscuous mode
[   73.276125][ T5761] device veth1_macvtap entered promiscuous mode
[   73.284693][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   73.286494][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   73.313804][ T5761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.322106][ T5761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.333248][ T5761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.337918][ T5761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.345154][ T5761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.354371][ T5761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.360158][ T5761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.365199][ T5761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.388202][ T5761] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.409563][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   73.411453][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   73.422067][ T5761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.431665][ T5761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.439320][ T5761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.446749][ T5761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.455976][ T5761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.457239][ T5863] misc userio: Invalid payload size
[   73.460174][ T5761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.461853][ T5761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.463705][ T5761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.466197][ T5761] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.468563][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   73.470221][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   73.472965][ T5761] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.474675][ T5761] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.476399][ T5761] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.480375][ T5761] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.506646][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.511531][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.513661][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   73.520168][   T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.521762][   T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.523211][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   73.647077][ T4341] Bluetooth: hci4: ACL packet too small
[   73.766248][ T5886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   73.776056][ T5886] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   74.018461][ T4341] Bluetooth: hci5: command 0x041b tx timeout
[   74.941509][ T5913] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found
[   75.453710][ T5928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   75.455528][ T5928] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   76.087910][ T4344] Bluetooth: hci5: command 0x040f tx timeout
[   76.628391][ T5873] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   77.538103][   T24] atkbd serio0: keyboard reset failed on 
[   77.880554][ T5971] =======================================================
[   77.880554][ T5971] WARNING: The mand mount option has been deprecated and
[   77.880554][ T5971]          and is ignored by this kernel. Remove the mand
[   77.880554][ T5971]          option from the mount to silence this warning.
[   77.880554][ T5971] =======================================================
[   78.167897][ T4341] Bluetooth: hci5: command 0x0419 tx timeout
[   78.308658][ T5977] binder: 5976:5977 ioctl 400c620e 20001300 returned -22
[   78.612999][ T5985] binder: 5984:5985 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   78.615751][ T5985] binder: 5985 RLIMIT_NICE not set
[   79.442772][ T6005] bonding: unable to delete non-existent b
[   79.464904][ T6008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   79.475202][ T6008] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   79.480472][ T6009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   79.482158][ T6009] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   79.601138][ T6019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   79.602958][ T6019] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   79.907751][ T4380] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   80.028455][ T6033] syz.1.646 uses obsolete (PF_INET,SOCK_PACKET)
[   80.133255][ T4380] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[   80.134801][ T4380] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.229577][ T6050] jffs2: notice: (6050) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   80.469245][ T4380] cdc_acm 1-1:1.0: ttyACM0: USB ACM device
[   80.631711][ T6060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   80.634218][ T6060] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   81.461131][ T6070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   81.462921][ T6070] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   81.531402][ T6072] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000)
[   82.465746][ T6094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   82.467516][ T6094] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   82.775927][ T6102] UDC core: g1: couldn't find an available UDC or it's busy
[   83.850634][ T6121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   83.852469][ T6121] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   83.882331][ T6127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.682'.
[   84.034255][ T6135] FAULT_INJECTION: forcing a failure.
[   84.034255][ T6135] name failslab, interval 1, probability 0, space 0, times 0
[   84.037127][ T6135] CPU: 1 PID: 6135 Comm: syz.2.687 Not tainted syzkaller #0
[   84.038470][ T6135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026
[   84.040333][ T6135] Call trace:
[   84.040949][ T6135]  dump_backtrace+0x1c4/0x1f0
[   84.041828][ T6135]  show_stack+0x2c/0x3c
[   84.042592][ T6135]  __dump_stack+0x30/0x40
[   84.043392][ T6135]  dump_stack_lvl+0xf4/0x15c
[   84.044240][ T6135]  dump_stack+0x1c/0x5c
[   84.045019][ T6135]  should_fail_ex+0x3cc/0x524
[   84.045896][ T6135]  __should_failslab+0xc0/0x11c
[   84.046823][ T6135]  should_failslab+0x10/0x28
[   84.047682][ T6135]  __kmem_cache_alloc_node+0x7c/0x318
[   84.048636][ T6135]  __kmalloc_node+0xc8/0x184
[   84.049431][ T6135]  kvmalloc_node+0x88/0x1d4
[   84.050244][ T6135]  cgroup_pidlist_start+0x3a8/0xec4
[   84.051183][ T6135]  cgroup_seqfile_start+0xa0/0xb4
[   84.052107][ T6135]  kernfs_seq_start+0x198/0x3b8
[   84.053019][ T6135]  seq_read_iter+0x358/0xc24
[   84.053858][ T6135]  kernfs_fop_read_iter+0x13c/0x5d8
[   84.054836][ T6135]  vfs_read+0x3cc/0x7b8
[   84.055644][ T6135]  ksys_read+0x12c/0x228
[   84.056425][ T6135]  __arm64_sys_read+0x7c/0x90
[   84.057293][ T6135]  invoke_syscall+0x98/0x290
[   84.058149][ T6135]  el0_svc_common+0x13c/0x258
[   84.059159][ T6135]  do_el0_svc+0x5c/0x134
[   84.060072][ T6135]  el0_svc+0x58/0x128
[   84.060842][ T6135]  el0t_64_sync_handler+0x84/0xf0
[   84.061811][ T6135]  el0t_64_sync+0x18c/0x190
[   86.251641][ T4378] usb 1-1: USB disconnect, device number 6
[   86.939863][ T6213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   86.941787][ T6213] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   86.948746][ T6213] Bluetooth: ISO socket layer initialized
[   87.203275][ T6217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   87.206204][ T6217] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   87.513839][ T6221] netlink: 32 bytes leftover after parsing attributes in process `syz.4.721'.
[   87.644721][ T6230] ISOFS: Unable to identify CD-ROM format.
[   87.761007][ T6235] Zero length message leads to an empty skb
[   87.822877][ T6240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   87.833832][ T6240] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   87.854763][ T6239] tc action pedit unable to extract header offset for header type (0x4)
[   87.856325][ T6239] tc action pedit unable to extract header offset for header type (0x4)
[   87.857827][ T6239] tc action pedit unable to extract header offset for header type (0x4)
[   87.859290][ T6239] tc action pedit unable to extract header offset for header type (0x4)
[   87.860634][ T6239] tc action pedit unable to extract header offset for header type (0x4)
[   87.861979][ T6239] tc action pedit unable to extract header offset for header type (0x4)
[   87.863326][ T6239] tc action pedit unable to extract header offset for header type (0x4)
[   87.864740][ T6239] tc action pedit unable to extract header offset for header type (0x4)
[   87.866119][ T6239] tc action pedit unable to extract header offset for header type (0x4)
[   87.867584][ T6239] tc action pedit unable to extract header offset for header type (0x4)
[   87.869079][ T6239] 0: reclassify loop, rule prio 0, protocol 800
[   88.826387][ T6277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   88.834113][ T6277] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   89.041770][ T6277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   89.045076][ T6277] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   89.297773][ T6288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   89.300267][ T6288] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   89.405284][ T6290] tmpfs: Unknown parameter 'usrquota'
[   89.484785][ T6292] netlink: 4 bytes leftover after parsing attributes in process `syz.5.746'.
[   89.685158][ T6303] binder: 6302:6303 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   89.688793][ T6303] binder: 6303 RLIMIT_NICE not set
[   89.721325][ T6305] binder: 6304:6305 ioctl c00c620f 20000240 returned -22
[   89.725376][ T6307] jffs2: notice: (6307) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   89.790911][ T6310] netlink: 36 bytes leftover after parsing attributes in process `syz.2.752'.
[   89.840218][ T4379] libceph: connect (1)[c::]:6789 error -101
[   89.841629][ T4379] libceph: mon0 (1)[c::]:6789 connect error
[   89.844629][ T6310] ceph: No mds server is up or the cluster is laggy
[   90.082424][ T6323] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   90.092915][ T6323] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   90.234050][ T6330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   90.241923][ T6330] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   90.351719][ T6334] netlink: 256 bytes leftover after parsing attributes in process `syz.5.762'.
[   90.987853][ T6358] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[   90.989438][ T6358] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[   91.004326][ T6358] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[   91.291300][ T6371] dlm: Unknown command passed to DLM device : 3
[   91.291300][ T6371] 
[   91.331807][ T6374] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8
[   91.530587][ T6384] ip_tables: iptables: counters copy to user failed while replacing table
[   91.622811][ T6387] gadgetfs: bound to dummy_udc driver
[   91.865356][ T6392] gadgetfs: suspended from state 2
[   91.907807][ T4379] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[   92.045899][ T6411] vcan0: tx address claim with dest, not broadcast
[   92.066994][ T6402] FAULT_INJECTION: forcing a failure.
[   92.066994][ T6402] name fail_futex, interval 1, probability 0, space 0, times 1
[   92.075842][ T6402] CPU: 0 PID: 6402 Comm: syz.1.791 Not tainted syzkaller #0
[   92.077028][ T6402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026
[   92.078603][ T6402] Call trace:
[   92.079152][ T6402]  dump_backtrace+0x1c4/0x1f0
[   92.080111][ T6402]  show_stack+0x2c/0x3c
[   92.080961][ T6402]  __dump_stack+0x30/0x40
[   92.081836][ T6402]  dump_stack_lvl+0xf4/0x15c
[   92.082680][ T6402]  dump_stack+0x1c/0x5c
[   92.083409][ T6402]  should_fail_ex+0x3cc/0x524
[   92.084216][ T6402]  should_fail+0x14/0x24
[   92.084944][ T6402]  get_futex_key+0x904/0xfb0
[   92.085869][ T6402]  futex_wait_setup+0xbc/0x320
[   92.086657][ T6402]  futex_wait+0x164/0x424
[   92.087451][ T6402]  do_futex+0x2e8/0x340
[   92.088157][ T6402]  __arm64_sys_futex+0x390/0x414
[   92.089032][ T6402]  invoke_syscall+0x98/0x290
[   92.089811][ T6402]  el0_svc_common+0x13c/0x258
[   92.090604][ T6402]  do_el0_svc+0x5c/0x134
[   92.091317][ T6402]  el0_svc+0x58/0x128
[   92.091995][ T6402]  el0t_64_sync_handler+0x84/0xf0
[   92.092863][ T6402]  el0t_64_sync+0x18c/0x190
[   92.704580][ T4341] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   92.706697][ T4341] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   92.711284][ T4341] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   92.712916][ T4341] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   92.714470][ T4341] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   92.715957][ T4341] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   92.749957][ T4379] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   92.860108][ T6192] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.927799][ T4379] usb 1-1: Using ep0 maxpacket: 32
[   93.032282][ T4379] usb 1-1: unable to get BOS descriptor or descriptor too short
[   93.034469][ T4379] usb 1-1: config 14 has an invalid interface number: 57 but max is 1
[   93.035924][ T4379] usb 1-1: config 14 has an invalid interface number: 228 but max is 1
[   93.037429][ T4379] usb 1-1: config 14 has no interface number 0
[   93.045110][ T4379] usb 1-1: config 14 has no interface number 1
[   93.047487][ T4379] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[   93.052763][ T4379] usb 1-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping
[   93.056527][ T4379] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[   93.060625][ T4379] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[   93.063089][ T4379] usb 1-1: config 14 interface 57 has no altsetting 0
[   93.064386][ T4379] usb 1-1: config 14 interface 228 has no altsetting 0
[   93.086495][ T4379] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[   93.098282][ T4379] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.099701][ T4379] usb 1-1: Product: syz
[   93.164179][ T4379] usb 1-1: Manufacturer: syz
[   93.165096][ T4379] usb 1-1: SerialNumber: syz
[   93.243781][ T6192] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.297574][ T6455] jffs2: notice: (6455) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   93.512132][ T6192] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.516887][ T6432] chnl_net:caif_netlink_parms(): no params data found
[   93.560238][ T6432] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.561741][ T6432] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.568507][ T6432] device bridge_slave_0 entered promiscuous mode
[   93.577173][ T4379] legousbtower 1-1:14.57: interrupt endpoints not found
[   93.628875][ T6192] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.631835][ T6432] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.633325][ T6432] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.635337][ T6432] device bridge_slave_1 entered promiscuous mode
[   93.684940][ T6432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   93.758892][ T6432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   93.771330][ T6432] team0: Port device team_slave_0 added
[   93.773840][ T6432] team0: Port device team_slave_1 added
[   93.778010][ T4379] legousbtower 1-1:14.228: interrupt endpoints not found
[   93.784510][ T6432] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.786093][ T6432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.791017][ T6432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.793499][ T6432] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.794745][ T6432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.799947][ T6432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.128982][ T6432] device hsr_slave_0 entered promiscuous mode
[   94.198363][ T6432] device hsr_slave_1 entered promiscuous mode
[   94.237742][ T6432] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   94.239186][ T6432] Cannot create hsr debugfs directory
[   94.309749][ T6478] FAULT_INJECTION: forcing a failure.
[   94.309749][ T6478] name failslab, interval 1, probability 0, space 0, times 0
[   94.311997][ T6478] CPU: 0 PID: 6478 Comm: syz.2.819 Not tainted syzkaller #0
[   94.313191][ T6478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026
[   94.314805][ T6478] Call trace:
[   94.315328][ T6478]  dump_backtrace+0x1c4/0x1f0
[   94.316100][ T6478]  show_stack+0x2c/0x3c
[   94.316822][ T6478]  __dump_stack+0x30/0x40
[   94.317502][ T6478]  dump_stack_lvl+0xf4/0x15c
[   94.318248][ T6478]  dump_stack+0x1c/0x5c
[   94.318960][ T6478]  should_fail_ex+0x3cc/0x524
[   94.319759][ T6478]  __should_failslab+0xc0/0x11c
[   94.320572][ T6478]  should_failslab+0x10/0x28
[   94.321322][ T6478]  __kmem_cache_alloc_node+0x7c/0x318
[   94.322217][ T6478]  __kmalloc_node+0xc8/0x184
[   94.322985][ T6478]  get_callchain_buffers+0x1d8/0x440
[   94.323897][ T6478]  stack_map_alloc+0x2d0/0x480
[   94.324751][ T6478]  map_create+0x480/0xe38
[   94.325461][ T6478]  __sys_bpf+0x280/0x660
[   94.326178][ T6478]  __arm64_sys_bpf+0x80/0x98
[   94.326924][ T6478]  invoke_syscall+0x98/0x290
[   94.327698][ T6478]  el0_svc_common+0x13c/0x258
[   94.328492][ T6478]  do_el0_svc+0x5c/0x134
[   94.329199][ T6478]  el0_svc+0x58/0x128
[   94.329849][ T6478]  el0t_64_sync_handler+0x84/0xf0
[   94.330733][ T6478]  el0t_64_sync+0x18c/0x190
[   94.571378][ T6481] netlink: 20 bytes leftover after parsing attributes in process `syz.1.820'.
[   94.719638][ T6432] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   94.728454][ T4344] Bluetooth: hci5: command 0x0409 tx timeout
[   94.764450][ T6432] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   94.809643][ T6432] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   95.030944][ T6432] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   95.497009][ T6432] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.681491][  T239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   95.683560][  T239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   95.687539][ T6432] 8021q: adding VLAN 0 to HW filter on device team0
[   95.702291][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   95.706874][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   95.715825][ T5171] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.717235][ T5171] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.776899][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   95.779315][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   95.781439][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   95.783614][ T5171] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.785042][ T5171] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.791915][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   95.806042][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   95.810422][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   95.816773][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   95.820062][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   95.822093][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   95.829221][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   95.833420][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   95.872582][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   95.874586][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   95.918928][ T4390] usb 1-1: USB disconnect, device number 8
[   95.920742][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   95.939990][ T6432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   96.817890][ T4341] Bluetooth: hci5: command 0x041b tx timeout
[   97.149143][ T6432] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.152761][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   97.154220][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   97.429717][ T6560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.834'.
[   98.079949][ T6581] IPv6: Can't replace route, no match found
[   98.207778][ T6597] netlink: 36 bytes leftover after parsing attributes in process `syz.2.845'.
[   98.209890][ T6597] netlink: 36 bytes leftover after parsing attributes in process `syz.2.845'.
[   98.406334][ T6626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   98.418583][ T6626] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   98.559990][ T5986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   98.562154][ T5986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   98.889125][ T4341] Bluetooth: hci5: command 0x040f tx timeout
[   98.905880][ T6432] device veth0_vlan entered promiscuous mode
[   98.917424][ T5986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   98.918181][ T6643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   98.920092][ T5986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   98.920719][ T6643] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   98.925608][ T6192] device hsr_slave_0 left promiscuous mode
[   98.978034][ T6192] device hsr_slave_1 left promiscuous mode
[   99.037850][ T6192] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.039339][ T6192] batman_adv: batadv0: Removing interface: batadv_slave_0
[   99.041177][ T6192] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.043402][ T6192] batman_adv: batadv0: Removing interface: batadv_slave_1
[   99.045093][ T6192] device bridge_slave_1 left promiscuous mode
[   99.047359][ T6192] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.088916][ T6192] device bridge_slave_0 left promiscuous mode
[   99.090208][ T6192] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.153498][ T6647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.156070][ T6647] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.199147][ T6192] device veth1_macvtap left promiscuous mode
[   99.200683][ T6192] device veth0_macvtap left promiscuous mode
[   99.202010][ T6192] device veth1_vlan left promiscuous mode
[   99.203267][ T6192] device veth0_vlan left promiscuous mode
[   99.432610][ T6658] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[   99.436100][ T4344] Bluetooth: hci1: unexpected subevent 0x0e length: 30 > 15
[  100.389310][ T6676] file system registered
[  100.978014][ T4344] Bluetooth: hci5: command 0x0419 tx timeout
[  101.022945][ T6692] block nbd2: NBD_DISCONNECT
[  101.249719][ T4341] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  101.251541][ T4341] CPU: 1 PID: 4341 Comm: kworker/u5:4 Not tainted syzkaller #0
[  101.252781][ T4341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026
[  101.254387][ T4341] Workqueue: hci0 hci_rx_work
[  101.255216][ T4341] Call trace:
[  101.255742][ T4341]  dump_backtrace+0x1c4/0x1f0
[  101.256563][ T4341]  show_stack+0x2c/0x3c
[  101.257227][ T4341]  __dump_stack+0x30/0x40
[  101.257999][ T4341]  dump_stack_lvl+0xf4/0x15c
[  101.258805][ T4341]  dump_stack+0x1c/0x5c
[  101.259575][ T4341]  sysfs_create_dir_ns+0x244/0x264
[  101.260526][ T4341]  kobject_add_internal+0x5a8/0xb18
[  101.261501][ T4341]  kobject_add+0x144/0x20c
[  101.262329][ T4341]  device_add+0x3dc/0xe4c
[  101.263115][ T4341]  hci_conn_add_sysfs+0xb8/0x1bc
[  101.264180][ T4341]  le_conn_complete_evt+0xd3c/0x1300
[  101.265215][ T4341]  hci_le_enh_conn_complete_evt+0x114/0x3b8
[  101.266319][ T4341]  hci_le_meta_evt+0x2c0/0x4a8
[  101.267192][ T4341]  hci_event_packet+0x64c/0xe60
[  101.268080][ T4341]  hci_rx_work+0x310/0xa70
[  101.268879][ T4341]  process_one_work+0x7e4/0x13bc
[  101.269780][ T4341]  worker_thread+0x8cc/0xfe8
[  101.270606][ T4341]  kthread+0x254/0x2e0
[  101.271361][ T4341]  ret_from_fork+0x10/0x20
[  101.277346][ T4341] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  101.279863][ T4341] Bluetooth: hci0: failed to register connection device
[  101.560364][ T4376] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  101.560801][ T6192] team0 (unregistering): Port device team_slave_1 removed
[  101.737760][ T4376] usb 1-1: Using ep0 maxpacket: 8
[  101.743028][ T4376] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  101.744536][ T4376] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  101.746302][ T4376] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  101.747963][ T4376] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  101.749637][ T4376] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  101.751295][ T4376] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  101.753494][ T4376] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  101.754966][ T4376] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.760130][ T4376] usbtmc: probe of 1-1:16.0 failed with error -22
[  101.790236][ T6192] team0 (unregistering): Port device team_slave_0 removed
[  101.948605][ T6192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  102.148875][ T6192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  102.198768][ T4376] infiniband syz1: ib_query_port failed (-19)
[  102.304485][ T6729] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found
[  103.434002][ T6192] bond0 (unregistering): Released all slaves
[  103.720966][ T6432] device veth1_vlan entered promiscuous mode
[  103.722489][ T5986] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  103.724351][ T5986] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  103.725924][ T5986] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  103.731522][   T22] bond0 speed is unknown, defaulting to 1000
[  103.744716][ T6671] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.751730][ T6671] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.769308][ T6741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  103.770990][ T6741] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  103.772391][ T6672] netlink: 'syz.4.870': attribute type 16 has an invalid length.
[  103.773694][ T6672] netlink: 'syz.4.870': attribute type 17 has an invalid length.
[  103.782982][ T6672] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  103.784286][ T6672] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  103.827830][ T6672] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  103.859135][ T5986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  103.861783][ T5986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  103.877240][ T6432] device veth0_macvtap entered promiscuous mode
[  103.880830][ T6432] device veth1_macvtap entered promiscuous mode
[  103.886502][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  103.890615][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.893323][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  103.895293][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.901275][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  103.903220][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.904962][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  103.906993][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.914088][ T6432] batman_adv: batadv0: Interface activated: batadv_slave_0
[  103.915761][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  103.917418][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  103.920423][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  103.922203][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  103.945000][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  103.947061][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.954346][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  103.957539][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.961299][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  103.965244][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.968328][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  103.970296][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.973155][ T6432] batman_adv: batadv0: Interface activated: batadv_slave_1
[  103.974845][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  103.976595][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  103.984331][ T6432] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.986420][ T6432] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.988342][ T6432] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.996392][ T6432] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.036173][ T1882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.037626][ T1882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.040123][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  104.055173][ T5371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.056856][ T5371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.060641][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  104.301979][ T6563] usb 1-1: USB disconnect, device number 9
[  104.777783][ T6563] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  104.831744][ T6822] tipc: Started in network mode
[  104.832933][ T6822] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  104.835168][ T6822] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  104.838864][ T6822] tipc: Enabled bearer <udp:syz0>, priority 10
[  104.924948][ T6836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  104.931242][ T6836] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  104.939155][ T6838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  104.943525][ T6838] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  104.986261][ T6563] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  104.988444][ T6563] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  104.991879][ T6563] usb 1-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01
[  104.993566][ T6563] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.996275][ T6563] usb 1-1: Product: syz
[  104.997074][ T6563] usb 1-1: Manufacturer: syz
[  105.000368][ T6563] usb 1-1: SerialNumber: syz
[  105.006536][ T6563] ums-onetouch 1-1:1.0: USB Mass Storage device detected
[  105.017195][ T6831] could not allocate digest TFM handle cmac(camellia-asm)
[  105.018029][ T6563] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5
[  105.020502][ T6563] input input5: usb_submit_urb failed
[  105.087879][ T6563] input: failed to attach handler kbd to device input5, error: -5
[  105.106981][ T6563] scsi host0: usb-storage 1-1:1.0
[  105.136966][ T4319] input input5: usb_submit_urb failed
[  105.215437][ T6563] usb 1-1: USB disconnect, device number 10
[  105.548307][   T79] block nbd1: Attempted send on invalid socket
[  105.549596][   T79] I/O error, dev nbd1, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  105.551163][   T79] gfs2: error 10 reading superblock
[  105.589664][ T6885] netlink: 16 bytes leftover after parsing attributes in process `syz.4.923'.
[  105.592671][ T6885] process 'syz.4.923' launched './file0' with NULL argv: empty string added
[  105.974072][ T4379] tipc: Node number set to 1
[  106.037880][ T6563] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  106.044333][ T6898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  106.046600][ T6898] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  106.229932][ T6563] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  106.232141][ T6563] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  106.240470][ T6563] usb 1-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01
[  106.242316][ T6563] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.243891][ T6563] usb 1-1: SerialNumber: syz
[  106.251161][ T6563] ums-onetouch 1-1:1.0: USB Mass Storage device detected
[  106.254387][ T6563] input: Maxtor Onetouch 0d49:7000 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6
[  106.256472][ T6563] input input6: usb_submit_urb failed
[  106.350444][ T6563] input: failed to attach handler kbd to device input6, error: -5
[  106.357743][ T6563] scsi host0: usb-storage 1-1:1.0
[  106.400349][ T4319] input input6: usb_submit_urb failed
[  106.420978][ T6907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  106.426060][ T6907] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  106.428365][ T6909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  106.430029][ T6909] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  106.451973][ T6563] usb 1-1: USB disconnect, device number 11
[  106.707195][ T6921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  106.710234][ T6921] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  107.553603][ T6952] netlink: 'syz.0.947': attribute type 13 has an invalid length.
[  107.555295][ T6952] netlink: 'syz.0.947': attribute type 17 has an invalid length.
[  107.556879][ T6952] netlink: 'syz.0.947': attribute type 27 has an invalid length.
[  107.607482][ T6960] netlink: 40 bytes leftover after parsing attributes in process `syz.0.948'.
[  107.830516][ T6960] 9pnet_virtio: no channels available for device ./file0
[  107.834541][ T6960] input: syz0 as /devices/virtual/input/input7
[  107.847440][ T6960] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.948'.
[  108.003691][ T6974] input: syz1 as /devices/virtual/input/input8
[  108.984168][ T6983] netlink: 240 bytes leftover after parsing attributes in process `syz.6.958'.
[  109.175569][ T6999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  109.177295][ T6999] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  109.248228][ T7005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  109.249962][ T7005] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  109.296405][ T7011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  109.298496][ T7011] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  109.507718][ T4336] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  109.547350][ T7021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  109.549152][ T7021] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  109.697734][ T4336] usb 1-1: Using ep0 maxpacket: 32
[  109.699994][ T4336] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  109.701256][ T4336] usb 1-1: config 0 has no interface number 0
[  109.703759][ T4336] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  109.705484][ T4336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.706987][ T4336] usb 1-1: Product: syz
[  109.707721][ T4336] usb 1-1: Manufacturer: syz
[  109.708471][ T4336] usb 1-1: SerialNumber: syz
[  109.710342][ T4336] usb 1-1: config 0 descriptor??
[  109.712222][ T4336] smsc95xx v2.0.0
[  109.748939][ T7023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  109.751210][ T7023] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  110.168750][ T7048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  110.170406][ T7048] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  110.389895][ T7054] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  110.469914][ T7075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  110.472697][ T7075] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  111.116217][ T7100] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1004'.
[  111.187920][ T4336] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71
[  111.190148][ T4336] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[  111.192157][ T4336] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  111.194503][ T4336] smsc95xx: probe of 1-1:0.67 failed with error -71
[  111.197396][ T4336] usb 1-1: USB disconnect, device number 12
[  112.083102][ T4341] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201'
[  112.084913][ T4341] CPU: 1 PID: 4341 Comm: kworker/u5:4 Not tainted syzkaller #0
[  112.086174][ T4341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026
[  112.087905][ T4341] Workqueue: hci5 hci_rx_work
[  112.088747][ T4341] Call trace:
[  112.089327][ T4341]  dump_backtrace+0x1c4/0x1f0
[  112.090175][ T4341]  show_stack+0x2c/0x3c
[  112.090905][ T4341]  __dump_stack+0x30/0x40
[  112.091711][ T4341]  dump_stack_lvl+0xf4/0x15c
[  112.092687][ T4341]  dump_stack+0x1c/0x5c
[  112.093526][ T4341]  sysfs_create_dir_ns+0x244/0x264
[  112.094491][ T4341]  kobject_add_internal+0x5a8/0xb18
[  112.095523][ T4341]  kobject_add+0x144/0x20c
[  112.096399][ T4341]  device_add+0x3dc/0xe4c
[  112.097214][ T4341]  hci_conn_add_sysfs+0xb8/0x1bc
[  112.098174][ T4341]  le_conn_complete_evt+0xd3c/0x1300
[  112.099143][ T4341]  hci_le_enh_conn_complete_evt+0x114/0x3b8
[  112.100236][ T4341]  hci_le_meta_evt+0x2c0/0x4a8
[  112.101112][ T4341]  hci_event_packet+0x64c/0xe60
[  112.101957][ T4341]  hci_rx_work+0x310/0xa70
[  112.102764][ T4341]  process_one_work+0x7e4/0x13bc
[  112.103650][ T4341]  worker_thread+0x8cc/0xfe8
[  112.104491][ T4341]  kthread+0x254/0x2e0
[  112.105228][ T4341]  ret_from_fork+0x10/0x20
[  112.107139][ T4341] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  112.110134][ T4341] Bluetooth: hci5: failed to register connection device
[  112.252317][ T7129] binder: 7127:7129 tried to acquire reference to desc 0, got 1 instead
[  112.351746][ T7134] binder: 7127:7134 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  112.363515][ T7134] binder: 7134 RLIMIT_NICE not set
[  112.364801][ T7134] binder: 7134 RLIMIT_NICE not set
[  112.787031][ T7144] tipc: Started in network mode
[  112.792352][ T7144] tipc: Node identity 7f000001, cluster identity 4711
[  112.798518][ T7144] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  113.217730][ T4376] binder: release 7127:7129 transaction 13 out, still active
[  113.288939][ T4376] binder: undelivered TRANSACTION_COMPLETE
[  113.290179][ T4376] binder: send failed reply for transaction 20 to 7127:7134
[  113.291930][ T4376] binder: release 7127:7134 transaction 13 in, still active
[  113.293417][ T4376] binder: send failed reply for transaction 13, target dead
[  113.294951][ T4376] binder: undelivered TRANSACTION_COMPLETE
[  113.298908][ T4376] binder: undelivered TRANSACTION_ERROR: 29189
[  113.313309][ T7156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  113.324629][ T7156] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  114.231668][ T7172] kAFS: Invalid Command on /proc/fs/afs/cells file
[  114.849539][ T7208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  114.868217][ T7208] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  114.928113][ T7212] nvme_fabrics: missing parameter 'transport=%s'
[  114.929340][ T7212] nvme_fabrics: missing parameter 'nqn=%s'
[  114.993379][ T7212] nvme_fabrics: missing parameter 'transport=%s'
[  114.994534][ T7212] nvme_fabrics: missing parameter 'nqn=%s'
[  115.076599][ T7223] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1047'.
[  115.086224][ T7223] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1047'.
[  117.572907][ T7265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  117.574615][ T7265] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  117.602392][ T7268] udc dummy_udc.0: failed to start g1: -19
[  117.603765][ T7268] UDC core: g1: couldn't find an available UDC or it's busy
[  117.619529][ T7271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  117.621325][ T7271] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  117.685967][ T7283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  117.689722][ T7283] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  118.507788][   T22] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  118.606389][ T7326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1070'.
[  118.628139][ T4341] Bluetooth: Frame is too long (len 20, expected len 4)
[  118.687902][   T22] usb 1-1: Using ep0 maxpacket: 8
[  118.740017][   T22] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  118.741820][   T22] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  118.755162][   T22] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  118.778638][   T22] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  118.808835][   T22] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  118.855272][   T22] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  118.901905][   T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.046735][ T7338] UDC core: g1: couldn't find an available UDC or it's busy
[  119.149542][ T7358] device syzkaller0 entered promiscuous mode
[  119.193242][   T22] usb 1-1: usb_control_msg returned -32
[  119.194481][   T22] usbtmc 1-1:16.0: can't read capabilities
[  119.651387][ T7369] usbtmc 1-1:16.0: control status returned 0
[  119.817381][ T4341] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201'
[  119.819508][ T4341] CPU: 1 PID: 4341 Comm: kworker/u5:4 Not tainted syzkaller #0
[  119.820916][ T4341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026
[  119.822834][ T4341] Workqueue: hci5 hci_rx_work
[  119.823661][ T4341] Call trace:
[  119.824358][ T4341]  dump_backtrace+0x1c4/0x1f0
[  119.825270][ T4341]  show_stack+0x2c/0x3c
[  119.826121][ T4341]  __dump_stack+0x30/0x40
[  119.826990][ T4341]  dump_stack_lvl+0xf4/0x15c
[  119.827893][ T4341]  dump_stack+0x1c/0x5c
[  119.828646][ T4341]  sysfs_create_dir_ns+0x244/0x264
[  119.829585][ T4341]  kobject_add_internal+0x5a8/0xb18
[  119.830549][ T4341]  kobject_add+0x144/0x20c
[  119.831411][ T4341]  device_add+0x3dc/0xe4c
[  119.832216][ T4341]  hci_conn_add_sysfs+0xb8/0x1bc
[  119.833121][ T4341]  le_conn_complete_evt+0xd3c/0x1300
[  119.834090][ T4341]  hci_le_enh_conn_complete_evt+0x114/0x3b8
[  119.835165][ T4341]  hci_le_meta_evt+0x2c0/0x4a8
[  119.836038][ T4341]  hci_event_packet+0x64c/0xe60
[  119.836929][ T4341]  hci_rx_work+0x310/0xa70
[  119.837741][ T4341]  process_one_work+0x7e4/0x13bc
[  119.838642][ T4341]  worker_thread+0x8cc/0xfe8
[  119.839457][ T4341]  kthread+0x254/0x2e0
[  119.840188][ T4341]  ret_from_fork+0x10/0x20
[  119.842580][ T4341] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  119.844824][ T4341] Bluetooth: hci5: failed to register connection device
[  119.857981][   T22] usb 1-1: USB disconnect, device number 13
[  120.585452][ T7393] udc dummy_udc.0: failed to start g1: -19
[  120.597363][ T7393] UDC core: g1: couldn't find an available UDC or it's busy
[  120.662733][ T7398] binder: 7397:7398 ioctl c00c620f 20000240 returned -22
[  121.697768][ T7402] ceph: No mds server is up or the cluster is laggy
[  123.147361][ T7460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  123.149329][ T7460] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  123.202814][ T7467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  123.204516][ T7467] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  123.211229][ T7464] udc dummy_udc.0: failed to start g1: -19
[  123.212461][ T7464] UDC core: g1: couldn't find an available UDC or it's busy
[  123.928962][ T7502] loop7: detected capacity change from 0 to 16384
[  124.783024][ T7549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  124.784882][ T7549] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  125.318260][ T7566] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  125.320106][ T7566] SQUASHFS error: Failed to read block 0x0: -5
[  125.747775][ T6638] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  125.928146][ T2065] ieee802154 phy0 wpan0: encryption failed: -22
[  125.928466][ T6638] usb 1-1: Using ep0 maxpacket: 8
[  125.929318][ T2065] ieee802154 phy1 wpan1: encryption failed: -22
[  125.932014][ T6638] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  125.933924][ T6638] usb 1-1: config 0 has no interfaces?
[  125.934908][ T6638] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  125.936811][ T6638] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.946761][ T6638] usb 1-1: config 0 descriptor??
[  128.508733][ T4336] usb 1-1: USB disconnect, device number 14
[  128.584551][ T7605] binder: 7604:7605 tried to acquire reference to desc 0, got 1 instead
[  128.586218][ T7605] binder_alloc: 7604: pid 7604 spamming oneway? 1 buffers allocated for a total size of 4096
[  128.599464][ T4376] binder: undelivered TRANSACTION_COMPLETE
[  128.955427][ T4376] binder: undelivered transaction 25, process died.
[  129.035854][ T4344] Bluetooth: hci5: unexpected subevent 0x0c length: 30 > 5
[  129.364347][ T7626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  129.366079][ T7626] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  129.404010][   T27] audit: type=1807 audit(129.390:130): UNKNOWN=me res=0
[  129.405675][   T27] audit: type=1802 audit(129.390:131): pid=7629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.1158" res=0 errno=0
[  129.419843][ T7627] ima: policy update failed
[  129.421991][   T27] audit: type=1802 audit(129.410:132): pid=7627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1158" res=0 errno=0
[  130.046065][ T7653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  130.047995][ T7653] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  130.360715][ T7668] trusted_key: encrypted_key: insufficient parameters specified
[  130.598723][ T4344] Bluetooth: hci1: command 0x2016 tx timeout
[  132.009870][ T4344] Bluetooth: hci4: command 0x2016 tx timeout
[  132.647788][ T4344] Bluetooth: hci1: command 0x0406 tx timeout
[  132.809683][ T4341] Bluetooth: hci2: command 0x2016 tx timeout
[  132.826741][ T7737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  132.846959][ T7737] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  133.158713][ T4344] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0'
[  133.160448][ T4344] CPU: 1 PID: 4344 Comm: kworker/u5:6 Not tainted syzkaller #0
[  133.161634][ T4344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026
[  133.163263][ T4344] Workqueue: hci5 hci_rx_work
[  133.164048][ T4344] Call trace:
[  133.164601][ T4344]  dump_backtrace+0x1c4/0x1f0
[  133.165379][ T4344]  show_stack+0x2c/0x3c
[  133.166011][ T4344]  __dump_stack+0x30/0x40
[  133.166741][ T4344]  dump_stack_lvl+0xf4/0x15c
[  133.167491][ T4344]  dump_stack+0x1c/0x5c
[  133.168207][ T4344]  sysfs_create_dir_ns+0x244/0x264
[  133.169148][ T4344]  kobject_add_internal+0x5a8/0xb18
[  133.170100][ T4344]  kobject_add+0x144/0x20c
[  133.170915][ T4344]  device_add+0x3dc/0xe4c
[  133.171736][ T4344]  hci_conn_add_sysfs+0xb8/0x1bc
[  133.172616][ T4344]  le_conn_complete_evt+0xd3c/0x1300
[  133.173581][ T4344]  hci_le_conn_complete_evt+0x114/0x3b8
[  133.174592][ T4344]  hci_le_meta_evt+0x2c0/0x4a8
[  133.175467][ T4344]  hci_event_packet+0x64c/0xe60
[  133.176333][ T4344]  hci_rx_work+0x310/0xa70
[  133.177154][ T4344]  process_one_work+0x7e4/0x13bc
[  133.178071][ T4344]  worker_thread+0x8cc/0xfe8
[  133.178924][ T4344]  kthread+0x254/0x2e0
[  133.179704][ T4344]  ret_from_fork+0x10/0x20
[  133.181489][ T4344] kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  133.183771][ T4344] Bluetooth: hci5: failed to register connection device
[  133.767863][ T4344] Bluetooth: hci5: command 0x2016 tx timeout
[  134.187234][ T4341] Bluetooth: hci4: command 0x0406 tx timeout
[  134.504800][ T4341] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0'
[  134.506592][ T4341] CPU: 1 PID: 4341 Comm: kworker/u5:4 Not tainted syzkaller #0
[  134.508055][ T4341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026
[  134.510021][ T4341] Workqueue: hci5 hci_rx_work
[  134.510976][ T4341] Call trace:
[  134.511630][ T4341]  dump_backtrace+0x1c4/0x1f0
[  134.512571][ T4341]  show_stack+0x2c/0x3c
[  134.513415][ T4341]  __dump_stack+0x30/0x40
[  134.514285][ T4341]  dump_stack_lvl+0xf4/0x15c
[  134.515164][ T4341]  dump_stack+0x1c/0x5c
[  134.515939][ T4341]  sysfs_create_dir_ns+0x244/0x264
[  134.516872][ T4341]  kobject_add_internal+0x5a8/0xb18
[  134.517821][ T4341]  kobject_add+0x144/0x20c
[  134.518600][ T4341]  device_add+0x3dc/0xe4c
[  134.519427][ T4341]  hci_conn_add_sysfs+0xb8/0x1bc
[  134.520326][ T4341]  le_conn_complete_evt+0xd3c/0x1300
[  134.521251][ T4341]  hci_le_conn_complete_evt+0x114/0x3b8
[  134.522214][ T4341]  hci_le_meta_evt+0x2c0/0x4a8
[  134.523078][ T4341]  hci_event_packet+0x64c/0xe60
[  134.523945][ T4341]  hci_rx_work+0x310/0xa70
[  134.524710][ T4341]  process_one_work+0x7e4/0x13bc
[  134.525532][ T4341]  worker_thread+0x8cc/0xfe8
[  134.526377][ T4341]  kthread+0x254/0x2e0
[  134.527118][ T4341]  ret_from_fork+0x10/0x20
[  134.529197][ T4341] kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  134.531613][ T4341] Bluetooth: hci5: failed to register connection device
[  134.887852][ T4341] Bluetooth: hci2: command 0x0406 tx timeout
[  135.847852][ T4344] Bluetooth: hci5: command 0x2016 tx timeout
[  136.142456][ T7821] binder: 7820:7821 tried to acquire reference to desc 0, got 1 instead
[  136.144315][ T7821] binder: 7820:7821 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  136.151564][ T7821] binder: 7821 RLIMIT_NICE not set
[  136.152518][ T7821] binder: 7821 RLIMIT_NICE not set
[  136.153404][ T7821] binder: send failed reply for transaction 30 to 7820:7821
[  136.154789][ T7821] binder: 7820:7821 ioctl c0306201 20000680 returned -14
[  136.156233][ T4336] binder: undelivered TRANSACTION_COMPLETE
[  136.157224][ T4336] binder: undelivered TRANSACTION_ERROR: 29201
[  137.928123][ T4344] Bluetooth: hci5: command 0x2016 tx timeout
[  138.756905][ T7889] fuse: Invalid rootmode
[  138.944082][    C0] Unknown status report in ack skb
[  139.980847][ T4341] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0'
[  139.982490][ T4341] CPU: 1 PID: 4341 Comm: kworker/u5:4 Not tainted syzkaller #0
[  139.983755][ T4341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026
[  139.985302][ T4341] Workqueue: hci2 hci_rx_work
[  139.986082][ T4341] Call trace:
[  139.986632][ T4341]  dump_backtrace+0x1c4/0x1f0
[  139.987445][ T4341]  show_stack+0x2c/0x3c
[  139.988168][ T4341]  __dump_stack+0x30/0x40
[  139.988958][ T4341]  dump_stack_lvl+0xf4/0x15c
[  139.989769][ T4341]  dump_stack+0x1c/0x5c
[  139.990502][ T4341]  sysfs_create_dir_ns+0x244/0x264
[  139.991452][ T4341]  kobject_add_internal+0x5a8/0xb18
[  139.992416][ T4341]  kobject_add+0x144/0x20c
[  139.993265][ T4341]  device_add+0x3dc/0xe4c
[  139.994046][ T4341]  hci_conn_add_sysfs+0xb8/0x1bc
[  139.994944][ T4341]  le_conn_complete_evt+0xd3c/0x1300
[  139.995920][ T4341]  hci_le_conn_complete_evt+0x114/0x3b8
[  139.996933][ T4341]  hci_le_meta_evt+0x2c0/0x4a8
[  139.997818][ T4341]  hci_event_packet+0x64c/0xe60
[  139.998736][ T4341]  hci_rx_work+0x310/0xa70
[  139.999572][ T4341]  process_one_work+0x7e4/0x13bc
[  140.000476][ T4341]  worker_thread+0x8cc/0xfe8
[  140.001324][ T4341]  kthread+0x254/0x2e0
[  140.002081][ T4341]  ret_from_fork+0x10/0x20
[  140.003467][ T4341] kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  140.005690][ T4341] Bluetooth: hci2: failed to register connection device
[  140.653767][ T7969] udc dummy_udc.0: failed to start g1: -19
[  140.660253][ T7969] UDC core: g1: couldn't find an available UDC or it's busy
[  141.048646][ T7986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  141.051271][ T7986] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  141.442925][ T8000] gadgetfs: bound to dummy_udc driver
[  141.687814][ T4341] Bluetooth: hci5: command 0x0406 tx timeout
[  141.717963][ T6638] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  141.719512][    C1] gadgetfs: connected
[  141.794127][ T8011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1303'.
[  142.008923][ T4344] Bluetooth: hci2: command 0x2016 tx timeout
[  142.135628][ T6638] gadgetfs: disconnected
[  142.409831][ T8019] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1308'.
[  142.766548][ T8027] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8
[  142.960267][ T4341] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  142.963103][ T4341] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  142.964854][ T4341] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  142.970830][ T4341] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  142.973288][ T4341] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  142.974794][ T4341] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  143.510288][ T1693] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.711288][ T1693] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.809581][ T8060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  143.827918][ T8060] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  143.841331][ T1693] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.845592][ T8037] chnl_net:caif_netlink_parms(): no params data found
[  143.951116][ T1693] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.953958][ T8037] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.955366][ T8037] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.957122][ T8037] device bridge_slave_0 entered promiscuous mode
[  143.960798][ T8037] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.964395][ T8037] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.966028][ T8037] device bridge_slave_1 entered promiscuous mode
[  143.974381][ T8037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  143.977299][ T8037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  143.989391][ T8037] team0: Port device team_slave_0 added
[  143.992270][ T8037] team0: Port device team_slave_1 added
[  143.998136][ T8037] batman_adv: batadv0: Adding interface: batadv_slave_0
[  143.999581][ T8037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.004521][ T8037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  144.007293][ T8037] batman_adv: batadv0: Adding interface: batadv_slave_1
[  144.008769][ T8037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.013768][ T8037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  144.066027][ T8037] device hsr_slave_0 entered promiscuous mode
[  144.108765][ T8037] device hsr_slave_1 entered promiscuous mode
[  144.157756][ T8037] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  144.159168][ T8037] Cannot create hsr debugfs directory
[  144.227971][ T4344] Bluetooth: hci2: command 0x0406 tx timeout
[  144.280410][ T8037] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  144.319161][ T8037] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  144.342072][ T8075] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1328'.
[  144.388840][ T8037] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  144.428929][ T8037] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  144.535868][ T8037] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.537189][ T8037] bridge0: port 2(bridge_slave_1) entered forwarding state
[  144.539244][ T8037] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.540406][ T8037] bridge0: port 1(bridge_slave_0) entered forwarding state
[  144.621770][ T1693] tipc: Left network mode
[  144.711488][ T8037] 8021q: adding VLAN 0 to HW filter on device bond0
[  144.733288][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  144.735642][ T7248] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.745504][ T7248] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.750987][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  144.776550][ T8037] 8021q: adding VLAN 0 to HW filter on device team0
[  144.796007][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  144.823195][ T7248] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.824637][ T7248] bridge0: port 1(bridge_slave_0) entered forwarding state
[  144.863092][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  144.873789][ T7248] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.875168][ T7248] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.057995][ T4344] Bluetooth: hci5: command 0x0409 tx timeout
[  145.285168][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  145.293203][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  145.313018][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  145.351232][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  145.413936][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  145.416248][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  145.419119][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  145.427098][ T8037] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  145.432670][ T8037] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  145.461070][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  145.463108][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  145.504204][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  145.507165][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  145.511427][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  146.022660][ T6146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  146.024373][ T6146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  146.029815][ T8037] 8021q: adding VLAN 0 to HW filter on device batadv0
[  146.687144][ T8149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  146.698132][ T8149] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  146.807569][ T7755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  146.809509][ T7755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  146.811191][ T7755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  146.812779][ T7755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  146.817129][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  146.821970][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  146.824234][ T8037] device veth0_vlan entered promiscuous mode
[  146.828585][ T8037] device veth1_vlan entered promiscuous mode
[  146.836540][ T7755] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  146.838343][ T7755] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  146.848497][ T7755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  146.853918][ T7755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  146.905751][ T8149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  146.907433][ T8149] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  146.912771][ T8037] device veth0_macvtap entered promiscuous mode
[  146.915333][ T8037] device veth1_macvtap entered promiscuous mode
[  146.936546][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  146.973535][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.975428][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  146.977352][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.979915][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  146.982216][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.984284][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  146.986018][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.988477][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  146.990309][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.007030][ T8037] batman_adv: batadv0: Interface activated: batadv_slave_0
[  147.050300][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  147.052133][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  147.053775][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  147.055641][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  147.058396][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  147.060115][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.062119][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  147.064040][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.065884][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  147.072010][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.073791][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  147.075517][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.077193][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  147.079687][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.082217][ T8037] batman_adv: batadv0: Interface activated: batadv_slave_1
[  147.084036][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  147.085803][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  147.099322][ T8037] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  147.100800][ T8037] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  147.102285][ T8037] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  147.108397][ T8037] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  147.137806][ T4344] Bluetooth: hci5: command 0x041b tx timeout
[  147.444304][ T8192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  147.445895][ T8192] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  147.473045][ T7755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.474501][ T7755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.475991][ T7755] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  147.827422][ T7755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.832212][ T7755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.151568][ T6192] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  148.262868][ T1693] device hsr_slave_0 left promiscuous mode
[  148.301643][ T1693] device hsr_slave_1 left promiscuous mode
[  148.361513][ T8211] binder: 8206:8211 ioctl c0306201 20000080 returned -14
[  148.373703][ T1693] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  148.375097][ T1693] batman_adv: batadv0: Removing interface: batadv_slave_0
[  148.396856][ T1693] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  148.398412][ T1693] batman_adv: batadv0: Removing interface: batadv_slave_1
[  148.401939][ T8211] binder: BINDER_SET_CONTEXT_MGR already set
[  148.403175][ T8211] binder: 8206:8211 ioctl 4018620d 20004a80 returned -16
[  148.406831][ T1693] device bridge_slave_1 left promiscuous mode
[  148.411265][ T1693] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.416530][ T8211] binder: 8206:8211 ioctl c0306201 200003c0 returned -14
[  148.418795][ T8211] binder: 8206:8211 got transaction to invalid handle, 1
[  148.420071][ T8211] binder: 8211:8206 cannot find target node
[  148.423025][ T8211] binder: 8206:8211 transaction call to 0:0 failed 33/29201/-22, size 112-24 line 3062
[  148.426725][ T4376] binder: undelivered TRANSACTION_ERROR: 29201
[  148.472784][ T1693] device bridge_slave_0 left promiscuous mode
[  148.474078][ T1693] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.660145][ T1693] device veth1_macvtap left promiscuous mode
[  148.661288][ T1693] device veth0_macvtap left promiscuous mode
[  148.663446][ T1693] device veth1_vlan left promiscuous mode
[  148.664454][ T1693] device veth0_vlan left promiscuous mode
[  149.207880][ T4341] Bluetooth: hci5: command 0x040f tx timeout
[  151.140953][ T1693] team0 (unregistering): Port device team_slave_1 removed
[  151.287746][ T4344] Bluetooth: hci5: command 0x0419 tx timeout
[  151.338735][ T1693] team0 (unregistering): Port device team_slave_0 removed
[  151.508578][ T1693] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  151.689387][ T1693] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  153.179577][ T1693] bond0 (unregistering): Released all slaves
[  153.550793][ T8234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1358'.
[  153.585707][ T8245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  153.591847][ T8245] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  153.607958][ T4344] Bluetooth: hci3: command 0x0406 tx timeout
[  153.617846][ T4344] Bluetooth: hci0: command 0x0406 tx timeout
[  153.618962][ T4344] Bluetooth: hci2: command 0x0406 tx timeout
[  153.620104][ T4344] Bluetooth: hci1: command 0x0406 tx timeout
[  154.121190][ T8257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1372'.
[  154.154697][ T8262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  154.173088][ T8262] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  154.579131][ T8262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  154.584564][ T8262] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  154.765001][ T8293] binder: 8291:8293 ioctl c0306201 20000080 returned -14
[  154.769086][ T8293] binder: 8291:8293 ioctl c0306201 200003c0 returned -14
[  154.770698][ T8293] binder: 8291:8293 got transaction to invalid handle, 1
[  154.776984][ T8293] binder: 8293:8291 cannot find target node
[  154.781303][ T8293] binder: 8291:8293 transaction call to 0:0 failed 36/29201/-22, size 112-24 line 3062
[  154.786816][ T4390] binder: undelivered TRANSACTION_ERROR: 29201
[  156.771393][ T8363] binder: 8362:8363 ioctl c0306201 20000080 returned -14
[  156.778926][ T8363] binder: 8362:8363 ioctl c0306201 200003c0 returned -14
[  156.780666][ T8363] binder: 8362:8363 got transaction to invalid handle, 1
[  156.782849][ T8363] binder: 8363:8362 cannot find target node
[  156.784244][ T8363] binder: 8362:8363 transaction call to 0:0 failed 39/29201/-22, size 112-24 line 3062
[  156.786625][ T4379] binder: undelivered TRANSACTION_ERROR: 29201
[  157.753415][ T8398] binder: 8397:8398 ioctl c0306201 20000080 returned -14
[  157.775215][ T8398] binder: 8397:8398 ioctl c0306201 200003c0 returned -14
[  157.792867][ T8398] binder: 8397:8398 got transaction to invalid handle, 1
[  157.794369][ T8398] binder: 8398:8397 cannot find target node
[  157.808487][ T8398] binder: 8397:8398 transaction call to 0:0 failed 42/29201/-22, size 112-24 line 3062
[  157.819511][ T4406] binder: undelivered TRANSACTION_ERROR: 29201
[  157.996682][ T8399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  158.007518][ T8399] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  158.329011][ T8418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1397'.
[  158.385441][ T8425] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  158.393747][ T4341] Bluetooth: hci2: unexpected subevent 0x0e length: 30 > 15
[  158.971795][ T8438] binder: 8436:8438 ioctl c0306201 20000080 returned -14
[  158.984740][ T8438] binder: 8436:8438 got transaction to invalid handle, 1
[  158.990624][ T8438] binder: 8438:8436 cannot find target node
[  160.251521][ T8470] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  160.256417][ T4341] Bluetooth: hci5: unexpected subevent 0x0e length: 30 > 15
[  160.349227][ T8475] binder: 8474:8475 ioctl c0306201 20000080 returned -14
[  160.351837][ T8475] binder: 8474:8475 got transaction to invalid handle, 1
[  160.353132][ T8475] binder_debug: 2 callbacks suppressed
[  160.353145][ T8475] binder: 8475:8474 cannot find target node
[  160.355324][ T8475] binder: 8474:8475 transaction call to 0:0 failed 50/29201/-22, size 112-24 line 3062
[  160.357252][ T4390] binder: undelivered TRANSACTION_ERROR: 29201
[  160.544955][ T8486] gadgetfs: bound to dummy_udc driver
[  160.797625][ T8491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  160.804421][ T8491] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  160.925067][ T8494] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1428'.
[  161.011033][ T8491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.012953][ T8491] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.222739][ T8505] binder: 8504:8505 ioctl c0306201 20000080 returned -14
[  161.225561][ T8505] binder: 8504:8505 got transaction to invalid handle, 1
[  161.227046][ T8505] binder: 8505:8504 cannot find target node
[  161.231192][ T8505] binder: 8504:8505 transaction call to 0:0 failed 54/29201/-22, size 112-24 line 3062
[  161.233827][ T4406] binder: undelivered TRANSACTION_ERROR: 29201
[  161.370467][ T4344] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  161.373438][ T4344] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  161.375353][ T4344] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  161.377210][ T4344] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  161.380851][ T4344] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  161.382397][ T4344] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  161.537115][ T8523] gadgetfs: bound to dummy_udc driver
[  161.599771][ T5312] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.706696][ T5312] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.765754][ T8512] chnl_net:caif_netlink_parms(): no params data found
[  161.795049][ T8512] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.796467][ T8512] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.086794][ T8512] device bridge_slave_0 entered promiscuous mode
[  162.129098][ T5312] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.133248][ T8512] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.134595][ T8512] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.136314][ T8512] device bridge_slave_1 entered promiscuous mode
[  162.210809][ T5312] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.217486][ T8512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  162.224342][ T8512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  162.241615][ T8512] team0: Port device team_slave_0 added
[  162.244377][ T8512] team0: Port device team_slave_1 added
[  162.254225][ T8512] batman_adv: batadv0: Adding interface: batadv_slave_0
[  162.255596][ T8512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.282515][ T8512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  162.313480][ T8554] gadgetfs: bound to dummy_udc driver
[  162.332862][ T8512] batman_adv: batadv0: Adding interface: batadv_slave_1
[  162.334046][ T8512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.342349][ T8512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  162.396078][ T8512] device hsr_slave_0 entered promiscuous mode
[  162.422915][ T8512] device hsr_slave_1 entered promiscuous mode
[  162.448484][ T8512] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  162.449913][ T8512] Cannot create hsr debugfs directory
[  162.570127][ T8512] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  162.602997][ T5312] tipc: Disabling bearer <udp:syz0>
[  162.604314][ T5312] tipc: Left network mode
[  162.606327][ T8512] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  162.650583][ T8512] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  162.690755][ T8512] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  162.712960][ T4344] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  162.715412][ T4344] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  162.717475][ T4344] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  162.719940][ T4344] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  162.721984][ T4344] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  162.731160][ T4344] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  162.786362][ T8583] jffs2: notice: (8583) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  163.196153][ T4331] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  163.198648][ T4331] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  163.200826][ T4331] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  163.202669][ T4331] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  163.205023][ T4331] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  163.207020][ T4331] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  163.351592][ T8611] gadgetfs: bound to dummy_udc driver
[  163.447827][ T4331] Bluetooth: hci1: command 0x0409 tx timeout
[  163.462507][ T8512] 8021q: adding VLAN 0 to HW filter on device bond0
[  163.525801][ T8626] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  163.544262][ T8512] 8021q: adding VLAN 0 to HW filter on device team0
[  163.546831][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  163.548682][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  163.550228][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  163.551866][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  163.553610][ T5171] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.554721][ T5171] bridge0: port 1(bridge_slave_0) entered forwarding state
[  163.562469][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  163.621268][ T6146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  163.623116][ T6146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  163.624760][ T6146] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.625998][ T6146] bridge0: port 2(bridge_slave_1) entered forwarding state
[  163.633494][ T8597] chnl_net:caif_netlink_parms(): no params data found
[  163.637123][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  163.653794][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  163.656713][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  163.663257][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  163.665289][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  163.705902][ T6146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  163.711509][ T6146] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  163.714635][ T8580] chnl_net:caif_netlink_parms(): no params data found
[  163.720061][ T6146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  163.721977][ T6146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  163.725251][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  163.726926][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  163.778845][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  163.798566][ T8597] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.800021][ T8597] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.811541][ T8597] device bridge_slave_0 entered promiscuous mode
[  163.819525][ T8580] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.820766][ T8580] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.823486][ T8580] device bridge_slave_0 entered promiscuous mode
[  163.826984][ T8597] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.833259][ T8597] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.835075][ T8597] device bridge_slave_1 entered promiscuous mode
[  163.871386][ T8580] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.872781][ T8580] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.874622][ T8580] device bridge_slave_1 entered promiscuous mode
[  163.890836][ T6146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  163.892220][ T6146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  163.896510][ T8580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  163.904582][ T8597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  163.909834][ T8512] 8021q: adding VLAN 0 to HW filter on device batadv0
[  163.952129][ T8580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  163.954977][ T8597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  163.984450][ T8597] team0: Port device team_slave_0 added
[  163.986556][ T8597] team0: Port device team_slave_1 added
[  163.991166][ T8580] team0: Port device team_slave_0 added
[  164.058117][ T8580] team0: Port device team_slave_1 added
[  164.059569][ T8597] batman_adv: batadv0: Adding interface: batadv_slave_0
[  164.060735][ T8597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.072298][ T8597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  164.083294][ T8597] batman_adv: batadv0: Adding interface: batadv_slave_1
[  164.084596][ T8597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.094530][ T8597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  164.102401][ T8580] batman_adv: batadv0: Adding interface: batadv_slave_0
[  164.104016][ T8580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.109766][ T8580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  164.381134][ T8580] batman_adv: batadv0: Adding interface: batadv_slave_1
[  164.382529][ T8580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.387010][ T8580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  164.479143][ T8580] device hsr_slave_0 entered promiscuous mode
[  164.518037][ T8580] device hsr_slave_1 entered promiscuous mode
[  164.557878][ T8580] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  164.559294][ T8580] Cannot create hsr debugfs directory
[  164.659270][ T8597] device hsr_slave_0 entered promiscuous mode
[  164.698352][ T8597] device hsr_slave_1 entered promiscuous mode
[  164.737760][ T8597] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  164.739185][ T8597] Cannot create hsr debugfs directory
[  164.808424][ T4344] Bluetooth: hci2: command 0x0409 tx timeout
[  165.052850][ T6146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  165.054791][ T6146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  165.071491][ T8512] device veth0_vlan entered promiscuous mode
[  165.076340][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  165.078749][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  165.127868][ T5312] device hsr_slave_0 left promiscuous mode
[  165.169147][ T5312] device hsr_slave_1 left promiscuous mode
[  165.247980][ T5312] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  165.249519][ T5312] batman_adv: batadv0: Removing interface: batadv_slave_0
[  165.251870][ T5312] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  165.253163][ T5312] batman_adv: batadv0: Removing interface: batadv_slave_1
[  165.254762][ T5312] device bridge_slave_1 left promiscuous mode
[  165.255917][ T5312] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.287777][ T4344] Bluetooth: hci5: command 0x0409 tx timeout
[  165.298436][ T5312] device bridge_slave_0 left promiscuous mode
[  165.299442][ T5312] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.437886][ T5312] device veth1_macvtap left promiscuous mode
[  165.439201][ T5312] device veth0_macvtap left promiscuous mode
[  165.440423][ T5312] device veth1_vlan left promiscuous mode
[  165.441564][ T5312] device veth0_vlan left promiscuous mode
[  165.490649][ T5312] bond2 (unregistering): Released all slaves
[  165.528506][ T4331] Bluetooth: hci1: command 0x041b tx timeout
[  165.534872][ T5312] bond1 (unregistering): Released all slaves
[  166.889464][ T4331] Bluetooth: hci2: command 0x041b tx timeout
[  167.367757][ T4331] Bluetooth: hci5: command 0x041b tx timeout
[  167.607741][ T4331] Bluetooth: hci1: command 0x040f tx timeout
[  167.669926][ T5312] team0 (unregistering): Port device team_slave_1 removed
[  167.829817][ T5312] team0 (unregistering): Port device team_slave_0 removed
[  168.029414][ T5312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  168.238193][ T5312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  168.967969][ T4331] Bluetooth: hci2: command 0x040f tx timeout
[  169.448679][ T4331] Bluetooth: hci5: command 0x040f tx timeout
[  169.569623][ T5312] bond0 (unregistering): Released all slaves
[  169.687747][ T4344] Bluetooth: hci1: command 0x0419 tx timeout
[  169.855371][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  169.857201][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  169.908313][ T8512] device veth1_vlan entered promiscuous mode
[  169.934935][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  169.936805][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  169.941283][ T8512] device veth0_macvtap entered promiscuous mode
[  169.957450][ T8512] device veth1_macvtap entered promiscuous mode
[  169.987068][ T8717] gadgetfs: bound to dummy_udc driver
[  170.015182][ T8580] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  170.152398][ T8597] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.403938][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  170.405671][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.407367][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  170.410143][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.411910][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  170.413774][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.415493][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  170.417372][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.420326][ T8512] batman_adv: batadv0: Interface activated: batadv_slave_0
[  170.422450][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  170.424148][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.425613][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  170.427186][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.429512][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  170.431513][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.433534][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  170.437459][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.450712][ T8737] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  170.453392][ T8512] batman_adv: batadv0: Interface activated: batadv_slave_1
[  170.454671][ T8580] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  170.494341][ T8580] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  170.520984][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  170.522833][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  170.524350][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  170.525975][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  170.527733][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  170.529509][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  170.588946][ T8597] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.592180][ T8580] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  170.634260][ T8512] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  170.635727][ T8512] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  170.637244][ T8512] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  170.639115][ T8512] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  170.705072][ T8597] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.787430][ T6146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  170.789443][ T7755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  170.790275][ T6146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.790876][ T7755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.882398][ T8597] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.890084][ T6146] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  170.891725][ T6146] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  170.915249][ T8580] 8021q: adding VLAN 0 to HW filter on device bond0
[  170.921458][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  170.922999][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  170.925992][ T8580] 8021q: adding VLAN 0 to HW filter on device team0
[  170.932439][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  170.933955][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  170.935511][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.936780][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[  170.940214][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  170.969807][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  170.972007][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  170.973517][   T39] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.974844][   T39] bridge0: port 2(bridge_slave_1) entered forwarding state
[  170.992143][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  170.994065][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  170.998351][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  171.005862][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  171.007592][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  171.037854][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  171.039730][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  171.041425][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  171.042843][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  171.046381][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  171.047990][ T4331] Bluetooth: hci2: command 0x0419 tx timeout
[  171.055036][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  171.065646][ T8580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  171.528249][ T4344] Bluetooth: hci5: command 0x0419 tx timeout
[  171.630289][ T5312] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.635908][ T8597] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  171.691325][ T8597] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  171.716931][ T8580] 8021q: adding VLAN 0 to HW filter on device batadv0
[  171.759261][ T5312] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.766353][ T8597] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  171.799157][ T8597] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  171.829318][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  171.830774][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  171.877278][ T5312] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.884846][ T8822] gadgetfs: bound to dummy_udc driver
[  171.934885][ T8597] 8021q: adding VLAN 0 to HW filter on device bond0
[  171.979385][ T5312] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.991630][ T8597] 8021q: adding VLAN 0 to HW filter on device team0
[  171.997126][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  172.003626][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  172.005188][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  172.007175][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  172.015226][ T7248] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.016551][ T7248] bridge0: port 1(bridge_slave_0) entered forwarding state
[  172.083069][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  172.085100][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  172.086834][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  172.089608][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  172.091249][ T7248] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.092412][ T7248] bridge0: port 2(bridge_slave_1) entered forwarding state
[  172.094015][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  172.099976][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  172.116993][ T7755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  172.122034][ T7755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  172.123987][ T7755] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  172.125542][ T7755] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  172.130732][ T8580] device veth0_vlan entered promiscuous mode
[  172.417310][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  172.425831][ T8597] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  172.430579][ T8597] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  172.458588][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  172.461957][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  172.463682][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  172.465355][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  172.467110][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  172.487575][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  172.509480][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  172.514525][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  172.517633][ T8580] device veth1_vlan entered promiscuous mode
[  172.552397][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  172.554298][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  172.556447][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  172.558706][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  172.574835][ T8854] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  172.593150][ T8580] device veth0_macvtap entered promiscuous mode
[  172.594668][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  172.608891][ T4331] Bluetooth: hci1: unexpected subevent 0x0e length: 30 > 15
[  172.611061][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  172.615896][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  172.619690][ T6146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  172.621210][ T6146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  172.627362][ T8597] 8021q: adding VLAN 0 to HW filter on device batadv0
[  172.690481][ T5312] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.703710][ T8580] device veth1_macvtap entered promiscuous mode
[  172.721283][ T8580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  172.723644][ T8580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.725361][ T8580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  172.727226][ T8580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.729767][ T8580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  172.731806][ T8580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.733699][ T8580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  172.735352][ T8580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.736936][ T8580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  172.744026][ T8580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.746730][ T8580] batman_adv: batadv0: Interface activated: batadv_slave_0
[  172.757310][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  172.759384][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  172.761087][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  172.762706][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  172.765428][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  172.811082][ T5312] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.818924][ T8580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  172.821277][ T8580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.822946][ T8580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  172.824637][ T8580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.826454][ T8580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  172.832478][ T8580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.834268][ T8580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  172.836076][ T8580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.838070][ T8580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  172.840024][ T8580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.842971][ T8580] batman_adv: batadv0: Interface activated: batadv_slave_1
[  172.846884][ T8580] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  172.849446][ T8580] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  172.851072][ T8580] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  172.852849][ T8580] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  172.855811][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  172.857548][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  172.921806][ T5312] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.926991][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  172.929710][ T7248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  172.938915][ T8597] device veth0_vlan entered promiscuous mode
[  172.940924][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  172.942763][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  172.949275][ T8597] device veth1_vlan entered promiscuous mode
[  173.027946][ T1693] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.028653][ T7755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.029435][ T1693] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.030819][ T7755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.032593][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  173.037568][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  173.079798][ T5312] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.103485][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  173.105650][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  173.112029][ T8597] device veth0_macvtap entered promiscuous mode
[  173.114951][ T8597] device veth1_macvtap entered promiscuous mode
[  173.120901][ T8597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.122612][ T8597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.124561][ T8597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.126454][ T8597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.132350][ T8597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.136827][ T8597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.139057][ T8597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.140858][ T8597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.142502][ T8597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.146345][ T8597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.153103][ T8597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.155099][ T8597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.159868][ T8890] gadgetfs: bound to dummy_udc driver
[  173.161665][ T8597] batman_adv: batadv0: Interface activated: batadv_slave_0
[  173.164100][ T8597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  173.165872][ T8597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.168807][ T8597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  173.170853][ T8597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.172609][ T8597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  173.174485][ T8597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.176288][ T8597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  173.178420][ T8597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.180235][ T8597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  173.182464][ T8597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.184282][ T8597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  173.186096][ T8597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.188859][ T8597] batman_adv: batadv0: Interface activated: batadv_slave_1
[  173.194405][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  173.196092][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  173.197571][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  173.203043][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  173.208349][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  173.210098][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  173.218593][ T8597] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  173.220386][ T8597] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  173.221824][ T8597] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  173.231658][ T8597] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  173.448264][ T4380] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[  173.451307][    C0] gadgetfs: connected
[  173.452654][ T4380] gadgetfs: disconnected
[  173.628259][    C0] gadgetfs: connected
[  173.632203][ T4380] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  173.633988][ T4380] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[  173.635396][ T4380] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.684566][    C0] gadgetfs: configuration #1
[  173.687223][ T7755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.688792][ T7755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.702658][ T1693] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.703996][ T1693] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.705496][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  173.707116][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  173.728174][ T8894] gadgetfs: suspended from state 3
[  173.731201][   T22] usb 1-1: USB disconnect, device number 18
[  173.732487][ T8894] gadgetfs: disconnected
[  173.753920][ T8512] ==================================================================
[  173.755316][ T8512] BUG: KASAN: use-after-free in __mutex_lock_common+0xb34/0x1f3c
[  173.756659][ T8512] Read of size 8 at addr ffff0000f4158450 by task syz-executor/8512
[  173.758073][ T8512] 
[  173.758466][ T8512] CPU: 0 PID: 8512 Comm: syz-executor Not tainted syzkaller #0
[  173.759829][ T8512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026
[  173.761551][ T8512] Call trace:
[  173.762112][ T8512]  dump_backtrace+0x1c4/0x1f0
[  173.762950][ T8512]  show_stack+0x2c/0x3c
[  173.763659][ T8512]  __dump_stack+0x30/0x40
[  173.764419][ T8512]  dump_stack_lvl+0xf4/0x15c
[  173.765223][ T8512]  print_address_description+0x88/0x218
[  173.766202][ T8512]  print_report+0x50/0x68
[  173.766970][ T8512]  kasan_report+0xa8/0xfc
[  173.767741][ T8512]  __asan_report_load8_noabort+0x2c/0x38
[  173.768749][ T8512]  __mutex_lock_common+0xb34/0x1f3c
[  173.769663][ T8512]  mutex_lock_interruptible_nested+0x38/0x44
[  173.770690][ T8512]  ep_open+0x58/0x26c
[  173.771383][ T8512]  do_dentry_open+0x738/0xf8c
[  173.772219][ T8512]  vfs_open+0x7c/0x90
[  173.772939][ T8512]  path_openat+0x1fc0/0x27a0
[  173.773764][ T8512]  do_filp_open+0x198/0x38c
[  173.774579][ T8512]  do_sys_openat2+0x134/0x3fc
[  173.775418][ T8512]  __arm64_sys_openat+0x11c/0x150
[  173.776353][ T8512]  invoke_syscall+0x98/0x290
[  173.777149][ T8512]  el0_svc_common+0x13c/0x258
[  173.777969][ T8512]  do_el0_svc+0x5c/0x134
[  173.778682][ T8512]  el0_svc+0x58/0x128
[  173.779375][ T8512]  el0t_64_sync_handler+0x84/0xf0
[  173.780250][ T8512]  el0t_64_sync+0x18c/0x190
[  173.781027][ T8512] 
[  173.781429][ T8512] Allocated by task 8890:
[  173.782173][ T8512]  kasan_set_track+0x4c/0x80
[  173.782934][ T8512]  kasan_save_alloc_info+0x24/0x30
[  173.783814][ T8512]  __kasan_kmalloc+0xa0/0xb8
[  173.784754][ T8512]  kmalloc_trace+0x7c/0x94
[  173.785587][ T8512]  gadgetfs_bind+0x204/0x7b0
[  173.786437][ T8512]  gadget_bind_driver+0x26c/0x684
[  173.787363][ T8512]  really_probe+0x3a0/0xac4
[  173.788258][ T8512]  __driver_probe_device+0x1c8/0x368
[  173.789230][ T8512]  driver_probe_device+0x78/0x324
[  173.790120][ T8512]  __driver_attach+0x3bc/0x614
[  173.790974][ T8512]  bus_for_each_dev+0x148/0x1d0
[  173.791852][ T8512]  driver_attach+0x50/0x60
[  173.792739][ T8512]  bus_add_driver+0x2c0/0x518
[  173.793617][ T8512]  driver_register+0x200/0x37c
[  173.794519][ T8512]  usb_gadget_register_driver_owner+0xf0/0x25c
[  173.795735][ T8512]  dev_config+0xba8/0xfec
[  173.796612][ T8512]  vfs_write+0x2a8/0x7c8
[  173.797365][ T8512]  ksys_write+0x12c/0x228
[  173.798107][ T8512]  __arm64_sys_write+0x7c/0x90
[  173.798954][ T8512]  invoke_syscall+0x98/0x290
[  173.799748][ T8512]  el0_svc_common+0x13c/0x258
[  173.800520][ T8512]  do_el0_svc+0x5c/0x134
[  173.801246][ T8512]  el0_svc+0x58/0x128
[  173.801962][ T8512]  el0t_64_sync_handler+0x84/0xf0
[  173.802841][ T8512]  el0t_64_sync+0x18c/0x190
[  173.803567][ T8512] 
[  173.803942][ T8512] Freed by task 8894:
[  173.804658][ T8512]  kasan_set_track+0x4c/0x80
[  173.805450][ T8512]  kasan_save_free_info+0x38/0x5c
[  173.806286][ T8512]  ____kasan_slab_free+0x148/0x1b0
[  173.807139][ T8512]  __kasan_slab_free+0x18/0x28
[  173.807958][ T8512]  slab_free_freelist_hook+0x16c/0x1e8
[  173.808918][ T8512]  __kmem_cache_free+0xbc/0x21c
[  173.809777][ T8512]  kfree+0xd0/0x1a8
[  173.810430][ T8512]  put_ep+0xd0/0x144
[  173.811117][ T8512]  destroy_ep_files+0x260/0x31c
[  173.811904][ T8512]  gadgetfs_unbind+0x114/0x2a8
[  173.812678][ T8512]  gadget_unbind_driver+0x188/0x35c
[  173.813560][ T8512]  device_release_driver_internal+0x3d4/0x6e4
[  173.814598][ T8512]  driver_detach+0x1e8/0x2ac
[  173.815387][ T8512]  bus_remove_driver+0x120/0x240
[  173.816248][ T8512]  driver_unregister+0x78/0xac
[  173.817062][ T8512]  usb_gadget_unregister_driver+0x50/0x78
[  173.818040][ T8512]  dev_release+0x8c/0x214
[  173.818765][ T8512]  __fput+0x1b4/0x7b0
[  173.819416][ T8512]  ____fput+0x20/0x30
[  173.820121][ T8512]  task_work_run+0x1f4/0x280
[  173.820914][ T8512]  do_exit+0x54c/0x19ac
[  173.821553][ T8512]  do_group_exit+0x0/0x238
[  173.822308][ T8512]  invoke_syscall+0x98/0x290
[  173.823141][ T8512]  el0_svc_common+0x13c/0x258
[  173.823959][ T8512]  do_el0_svc+0x5c/0x134
[  173.824675][ T8512]  el0_svc+0x58/0x128
[  173.825349][ T8512]  el0t_64_sync_handler+0x84/0xf0
[  173.826206][ T8512]  el0t_64_sync+0x18c/0x190
[  173.826980][ T8512] 
[  173.827397][ T8512] Last potentially related work creation:
[  173.828345][ T8512]  kasan_save_stack+0x40/0x70
[  173.829156][ T8512]  __kasan_record_aux_stack+0xc0/0xdc
[  173.830075][ T8512]  kasan_record_aux_stack_noalloc+0x14/0x20
[  173.831173][ T8512]  insert_work+0x64/0x37c
[  173.831962][ T8512]  __queue_work+0xd00/0x1280
[  173.832841][ T8512]  delayed_work_timer_fn+0x74/0x94
[  173.833778][ T8512]  call_timer_fn+0x1b8/0x96c
[  173.834646][ T8512]  __run_timers+0x4d0/0x6d8
[  173.835462][ T8512]  run_timer_softirq+0x7c/0x114
[  173.836377][ T8512]  handle_softirqs+0x318/0xc90
[  173.837232][ T8512]  __do_softirq+0x14/0x20
[  173.837996][ T8512] 
[  173.838386][ T8512] Second to last potentially related work creation:
[  173.839561][ T8512]  kasan_save_stack+0x40/0x70
[  173.840382][ T8512]  __kasan_record_aux_stack+0xc0/0xdc
[  173.841338][ T8512]  kasan_record_aux_stack_noalloc+0x14/0x20
[  173.842326][ T8512]  insert_work+0x64/0x37c
[  173.843077][ T8512]  __queue_work+0xd00/0x1280
[  173.843873][ T8512]  delayed_work_timer_fn+0x74/0x94
[  173.844844][ T8512]  call_timer_fn+0x1b8/0x96c
[  173.845628][ T8512]  __run_timers+0x4d0/0x6d8
[  173.846426][ T8512]  run_timer_softirq+0x7c/0x114
[  173.847199][ T8512]  handle_softirqs+0x318/0xc90
[  173.847997][ T8512]  __do_softirq+0x14/0x20
[  173.848741][ T8512] 
[  173.849131][ T8512] The buggy address belongs to the object at ffff0000f4158400
[  173.849131][ T8512]  which belongs to the cache kmalloc-512 of size 512
[  173.851412][ T8512] The buggy address is located 80 bytes inside of
[  173.851412][ T8512]  512-byte region [ffff0000f4158400, ffff0000f4158600)
[  173.853527][ T8512] 
[  173.853914][ T8512] The buggy address belongs to the physical page:
[  173.854965][ T8512] page:00000000568a9ffe refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x134158
[  173.856689][ T8512] head:00000000568a9ffe order:2 compound_mapcount:0 compound_pincount:0
[  173.858077][ T8512] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff)
[  173.859462][ T8512] raw: 05ffc00000010200 fffffc0003d88c00 dead000000000002 ffff0000c0002600
[  173.860905][ T8512] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  173.862287][ T8512] page dumped because: kasan: bad access detected
[  173.863369][ T8512] 
[  173.863773][ T8512] Memory state around the buggy address:
[  173.864732][ T8512]  ffff0000f4158300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  173.866073][ T8512]  ffff0000f4158380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  173.867415][ T8512] >ffff0000f4158400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  173.868875][ T8512]                                                  ^
[  173.870035][ T8512]  ffff0000f4158480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  173.871480][ T8512]  ffff0000f4158500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  173.872915][ T8512] ==================================================================
[  173.874882][ T8512] Disabling lock debugging due to kernel taint